CVE-2023-24788
1 advisory.
Packagist/notrinos/notrinos-erp CVE-2023-24788: high 8.8, EPSS 3.09%
NotrinosERP vulnerable to SQL Injection
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.7 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-4pqp-69m3-f8pp
- https://nvd.nist.gov/vuln/detail/CVE-2023-24788
- https://github.com/arvandy/CVE/blob/main/CVE-2023-24788/CVE-2023-24788.md
- https://github.com/arvandy/CVE/blob/main/CVE-2023-24788/CVE-2023-24788.py
- https://github.com/arvandy/CVE/blob/main/NotrinosERP/POC.md
- https://github.com/notrinos/NotrinosERP
- http://packetstormsecurity.com/files/171804/NotrinosERP-0.7-SQL-Injection.html
CVE-2023-24788 · published · modified · JSON