Skip to content
OpenAdvisories

Vendor

ury-erp

1 known vulnerabilities.

Products

ury 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2025-13168

    ury-erp ury pos_extend.py overrided_past_order_list sql injection

    A weakness has been identified in ury-erp ury up to 0.2.0. This affects the function overrided_past_order_list of the file ury/ury/api/pos_extend.py. This manipulation of the argument search_term causes sql injection. Remote exploitation of the attack is poss…

    ury-erp ury