Vendor
Zalktis Programmas (SIA "Zalktis Programmas")
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 8.8
Zalktis: SQL injection via partner-controlled fields in imported e-invoices
SQL injection in the Zalktis accounting application via trading-partner-controlled text fields in received electronic invoices. When importing a received e-invoice (UBL/PEPPOL) or an e-commerce export, Zalktis concatenates partner-controlled values directly i…