Vulnerabilities

TI-2025-21063 CVE-2025-29390 · GHSA-7hrr-g3xx-3xvg

jerryhanjj ERP 1.0 is vulnerable to SQL Injection in the set_password function in application/controllers/home.php.

HIGH 73

jerryhanjj ERP 1.0 is vulnerable to SQL Injection in the set_password function in application/controllers/home.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00472 Published 2025-04-09 No fix listed CWE-89

TI-2024-28504 CVE-2024-42565 · GHSA-q567-qjp8-m2mc

HIGH 82

ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/contact/delete?action=delete.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.006 Published 2024-08-20 No fix listed CWE-89

TI-2024-28503 CVE-2024-42564 · GHSA-fcf2-47c2-px5h

HIGH 68

ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/inventory/delete?action=delete.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.0044 Published 2024-08-20 No fix listed CWE-89

TI-2024-28502 CVE-2024-42563 · GHSA-2vf4-v2rm-3993

HIGH 82

An arbitrary file upload vulnerability in ERP commit 44bd04 allows attackers to execute arbitrary code via uploading a crafted HTML file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00826 Published 2024-08-20 No fix listed CWE-434

TI-2022-03616 CVE-2022-3944 · GHSA-jf93-825c-qghm

HIGH 71

A vulnerability was found in jerryhanjj ERP.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0058 Published 2022-11-11 No fix listed CWE-266