SA
Product
Salonerp
by Salonerp Project · last CVE Nov 3, 2022
2
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch

Add Salonerp to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-45406
8.8
2%
Jan 14
In SalonERP 3.0.1, a SQL injection vulnerability allows an attacker to inject payload using 'sql' parameter in SQL query while generating a report
Affected: 3.0.1
CVE-2022-42753
6.1
0%
Nov 3
SalonERP version 3.0.2 allows an external attacker to steal the cookie of arbitrary users
Affected: 3.0.2
Showing 2