Security Advisory

CVE-2021-45406

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-01-14 19:25:16

Last updated 2024-08-04 04:39:20

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

In SalonERP 3.0.1, a SQL injection vulnerability allows an attacker to inject payload using 'sql' parameter in SQL query while generating a report. Upon successfully discovering the login admin password hash, it can be decrypted to obtain the plain-text password.

← Browse all CVEs View on cve.org ↗