Erp Online
Approved changes feed: RSS · Atom
cpe:2.3:a:devs_palace:erp_online:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Devs Palace (03a15f59-5aa1-56c6-a96d-a1f566be224e) |
|---|---|
| Product | Erp Online (79ddccc6-0286-556c-9d8d-a63a29493e89) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-8262 |
vulnerable | 2026-06-08 08:08:58.254015 |
Devs Palace ERP Online chart-save cross site scripting
LOW (2.4)
A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. This impacts an unknown function of the file /accounts/chart-save. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-05-11T01:45:10.840Z
Updated: 2026-05-11T14:04:21.291Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8256 |
vulnerable | 2026-06-08 08:08:58.236823 |
Devs Palace ERP Online mr-save cross site scripting
LOW (2.4)
A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. This vulnerability affects unknown code of the file /accounts/mr-save. Such manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-05-11T00:15:09.296Z
Updated: 2026-05-11T14:08:51.626Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8255 |
vulnerable | 2026-06-08 08:08:58.236457 |
Devs Palace ERP Online add_new_customer cross site scripting
LOW (2.4)
A weakness has been identified in Devs Palace ERP Online up to 4.0.0. This affects an unknown part of the file /inventory/add_new_customer. This manipulation causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-05-11T00:00:19.440Z
Updated: 2026-05-11T14:30:18.137Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8254 |
vulnerable | 2026-06-08 08:08:58.236067 |
Devs Palace ERP Online sales_save cross site scripting
LOW (2.4)
A security flaw has been discovered in Devs Palace ERP Online up to 4.0.0. Affected by this issue is some unknown functionality of the file /inventory/sales_save. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-05-10T23:45:17.119Z
Updated: 2026-05-12T02:42:53.538Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8253 |
vulnerable | 2026-06-08 08:08:58.235787 |
Devs Palace ERP Online purchase_save cross site scripting
LOW (2.4)
A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. Affected by this vulnerability is an unknown functionality of the file /inventory/purchase_save. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-05-10T23:30:10.769Z
Updated: 2026-05-11T11:00:57.828Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8221 |
vulnerable | 2026-06-08 08:08:58.215989 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8220 |
vulnerable | 2026-06-08 08:08:58.215610 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8219 |
vulnerable | 2026-06-08 08:08:58.215209 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8218 |
vulnerable | 2026-06-08 08:08:58.214722 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.