CVE-2024-7837

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Firmanet Software ERP allows SQL Injection. This issue affects ERP: through 22.11.2024. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

high 8.2 CVSS 3.1
Published: Nov 22, 2024
Modified: Jun 2, 2026

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Firmanet Software ERP allows SQL Injection.

This issue affects ERP: through 22.11.2024.

NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

References