CVE-2022-28930
ERP-Pro v3.7.5 was discovered to contain a SQL injection vulnerability via the component /base/SysEveMenuAuthPointMapper.xml..
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2022-05-15
- Last modified
- 2024-08-03
- Weaknesses
- CWE-89
Affected products
References
- https://gitee.com/doc_wei01/erp-pro/issues/I515R4
