Skip to content
OpenAdvisories

Vendor

Zalktis Programmas (SIA "Zalktis Programmas")

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.8

    Zalktis: SQL injection via partner-controlled fields in imported e-invoices

    SQL injection in the Zalktis accounting application via trading-partner-controlled text fields in received electronic invoices. When importing a received e-invoice (UBL/PEPPOL) or an e-commerce export, Zalktis concatenates partner-controlled values directly i…