What is GHSA-4pqp-69m3-f8pp?

GHSA-4pqp-69m3-f8pp is a security advisory published by GitHub Security Advisories with High severity. NotrinosERP vulnerable to SQL Injection

Which CVE IDs does GHSA-4pqp-69m3-f8pp cover?

GHSA-4pqp-69m3-f8pp covers the following CVE IDs: CVE-2023-24788. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4pqp-69m3-f8pp?

GHSA-4pqp-69m3-f8pp has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

Which products are affected by GHSA-4pqp-69m3-f8pp?

GHSA-4pqp-69m3-f8pp affects 1 product, including: composer/notrinos/notrinos-erp:\u003c= 0.7.

GHSA-4pqp-69m3-f8ppHighCVSS 8.8

NotrinosERP vulnerable to SQL Injection

Vendor

GitHub Security Advisories

Published

March 23, 2023

Last Modified

May 11, 2023

🔗 CVE IDs covered (1)

CVE-2023-24788 →

📋 Description

NotrinosERP v0.7 was discovered to contain a SQL injection vulnerability via the OrderNumber parameter at /NotrinosERP/sales/customer_delivery.php.

🎯 Affected products1

composer/notrinos/notrinos-erp:<= 0.7

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2023-24788
https://github.com/arvandy/CVE/blob/main/CVE-2023-24788/CVE-2023-24788.md
https://github.com/arvandy/CVE/blob/main/CVE-2023-24788/CVE-2023-24788.py
https://github.com/arvandy/CVE/blob/main/NotrinosERP/POC.md
https://github.com/notrinos/NotrinosERP
http://packetstormsecurity.com/files/171804/NotrinosERP-0.7-SQL-Injection.html
https://github.com/advisories/GHSA-4pqp-69m3-f8pp