critical9.8
CVE-2022-28930
ERP-Pro v3.7.5 was discovered to contain a SQL injection vulnerability via the component /base/SysEveMenuAuthPointMapper.xml..
Impact
ERP-Pro v3.7.5 was discovered to contain a SQL injection vulnerability via the component /base/SysEveMenuAuthPointMapper.xml..
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Erp-Pro Project | Erp-Pro | Version 3.7.5 |