Beveiligingsadvies

CVE-2018-25392

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-29 14:46:35

Laatst bijgewerkt 2026-06-02 01:32:35

Toegewezen door VulnCheck

CVSS-score 7.1

Status PUBLISHED

Beschrijving

MaxOn ERP Software 8.x-9.x contains an SQL injection vulnerability that allows authenticated users to execute arbitrary SQL queries through the nomor, user, and jenis parameters in the log_activity function. Attackers can send POST requests to /index.php/user/log_activity with malicious SQL code in these parameters to extract sensitive database information including version and database names.

← Alle CVE's bekijken Bekijk op cve.org ↗