Inoideas Inoerp — known CVE vulnerabilities

Every CVE whose affected-product data names Inoideas Inoerp, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2019-16894 — CVSS 9.8 (critical): download.php in inoERP 4.15 allows SQL injection through insecure deserialization.
• CVE-2020-28870 — CVSS 9.8 (critical): In InoERP 0.7.2, an unauthorized attacker can execute arbitrary code on the server side due to lack of validations in…
• CVE-2019-25312 — CVSS 5.4 (medium): InoERP 0.7.2 contains a persistent cross-site scripting vulnerability in the comment section that allows unauthenticated attackers to…