Medium · 6.5 CVE-2025-29267 EUVD-2025-20497GHSA-j6hm-h7hj-9g5c

SQL Injection vulnerability in Abis, Inc Adjutant Core Accounting ERP build v.PreBeta250F allows a remote attacker to obtain a sensitive in…

Published Jul 8, 2025 · Updated Jul 5, 2026 · Assigned by mitre

Description

SQL Injection vulnerability in Abis, Inc Adjutant Core Accounting ERP build v.PreBeta250F allows a remote attacker to obtain a sensitive information via the cid parameter in the GET request.

References

https://github.com/cmoncrook/Security-Advisories/blob/main/CVE-2025-29267