SP
Vendor
Salonerp Project
2
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-42753 | SA Salonerp Salonerp Project | 6.1 | Nov 3 | SalonERP version 3.0.2 allows an external attacker to steal the cookie of arbitrary users |
| CVE-2021-45406 | SA Salonerp Salonerp Project | 8.8 | Jan 14 | In SalonERP 3.0.1, a SQL injection vulnerability allows an attacker to inject payload using 'sql' parameter in SQL query while generating a report |