Approved changes feed: RSS · Atom

cpe:2.3:a:jerryhanjj:erp:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJerryhanjj (776fe04c-8723-5139-901d-d0b43337a2c6)
ProductErp (c083ad74-3fd4-56cc-86d6-10b400b89f15)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/jerryhanjj/erp purl2cpe 2026-06-01 10:15:29.687289

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-42565 vulnerable 2026-06-08 06:45:46.731468 Details available
ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/contact/delete?action=delete.
Published: 2024-08-20T00:00:00.000Z
Updated: 2024-08-20T20:25:37.837Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42563 vulnerable 2026-06-08 06:45:46.727688 Details available
An arbitrary file upload vulnerability in ERP commit 44bd04 allows attackers to execute arbitrary code via uploading a crafted HTML file.
Published: 2024-08-20T00:00:00.000Z
Updated: 2024-08-21T16:05:26.995Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3944 vulnerable 2026-06-08 05:48:22.679547 jerryhanjj ERP Commodity Management inventory.php uploadImages unrestricted upload
MEDIUM (6.3)
A vulnerability was found in jerryhanjj ERP. It has been declared as critical. Affected by this vulnerability is the function uploadImages of the file application/controllers/basedata/inventory.php of the component Commodity Management. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-213451.
Published: 2022-11-11T00:00:00.000Z
Updated: 2025-04-15T13:16:47.240Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.