Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
E4 Sistemas Mercatus ERP id resource injection
Vulnerability Description
A security flaw has been discovered in E4 Sistemas Mercatus ERP 2.00.019. The affected element is an unknown function of the file /basico/webservice/imprimir-danfe/id/. Performing manipulation results in improper control of resource identifiers. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
对资源描述符的控制不恰当(资源注入)
Vulnerability Title
Mercatus ERP 安全漏洞
Vulnerability Description
Mercatus ERP是美国Mercatus公司的一个企业资源规划系统。 Mercatus ERP 2.00.019版本存在安全漏洞，该漏洞源于文件/basico/webservice/imprimir-danfe/id存在资源标识符控制不当问题。
CVSS Information
N/A
Vulnerability Type
N/A