NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Firmanet Software | ERP | affected |
|
No data.
No data.
No data available yet.
No remediation available yet.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2024-48864 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Firmanet Software ERP allows SQL Injection.This issue affects ERP: through 22.11.2024. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. |
| Link | Providers |
|---|---|
| https://www.usom.gov.tr/bildirim/tr-24-1868 |
|
Mon, 25 Nov 2024 19:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Firmanet
Firmanet erp |
|
| CPEs | cpe:2.3:a:firmanet:erp:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Firmanet
Firmanet erp |
|
| Metrics |
ssvc
|
Fri, 22 Nov 2024 08:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Firmanet Software ERP allows SQL Injection.This issue affects ERP: through 22.11.2024. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. | |
| Title | SQLi in Firmanet Software's ERP | |
| Weaknesses | CWE-89 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: TR-CERT
Published:
Updated: 2024-11-25T18:18:08.079Z
Reserved: 2024-08-15T14:26:10.913Z
Link: CVE-2024-7837
Vulnrichment
Updated: 2024-11-25T18:18:02.301Z
NVD
Status : Received
Published: 2024-11-22T09:15:12.850
Modified: 2024-11-22T09:15:12.850
Link: CVE-2024-7837
Redhat
No data.
OpenCVE Enrichment
No data.