Read the docs

Znfit

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Znfit records in CISA KEV

No Znfit vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

Priority MEDIUM 50

SQL Injection vulnerability in znfit Home improvement ERP management system V50_20220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00761 Published 2023-02-21 No fix listed CWE-89
Open these records in search →