Skip to content
OpenAdvisories

Vendor

Manacle Technologies

6 known vulnerabilities.

6 results · Clear filters · Feed

  • Critical 9.3

    Unsafe Deserialization Vulnerability in Manacle Technologies ERP System

    This vulnerability exists in the ERP system due to unsafe deserialization of user controlled data in the affected functionality. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted data to the vulnerable function…

  • Critical 9.3

    SQL Injection Vulnerability in Manacle Technologies ERP System

    This vulnerability exists in the ERP system due to insufficient validation and parameterization of user supplied input in an API endpoint. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted input to the vulnerab…

  • Critical 9.3

    Account Takeover Vulnerability in Manacle Technologies ERP System

    This vulnerability exists in the ERP system due to improper validation of payment callback parameters and inadequate authentication controls in API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating the parameter to …

  • Critical 9.2

    Information Disclosure Vulnerability in Manacle Technologies ERP System

    This vulnerability exists in the ERP system due to exposure of repository information through a publicly accessible .git directory. An unauthenticated remote attacker could exploit this vulnerability by accessing the exposed .git directory and retrieving repo…

  • Critical 9.2

    Insecure Direct Object Reference Vulnerability in Manacle Technologies ERP System

    This vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating parameter which could lead to exposure of sensitive …

  • Critical 10.0

    Remote Code Execution Vulnerability in Manacle Technologies ERP System

    This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by uploading arbitrary files to a web accessible d…