InoideasCVEs & Vulnerabilities
3 CVEs affecting Inoideas products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
3 CVEs→ All vendors
Most Affected Products
inoerp 3
CVE-2019-25312MEDIUMweaponized
InoERP 0.7.2 contains a persistent cross-site scripting vulnerability in the comment section that allows unauthenticated attackers to inject malicious scripts. Attackers can submit comments with JavaScript payloads that execute in other users' browsers, potentially stealing cookies and session information.
11 Feb 2026
5.4
CVSS
CVE-2020-28870CRITICAL
In InoERP 0.7.2, an unauthorized attacker can execute arbitrary code on the server side due to lack of validations in /modules/sys/form_personalization/json_fp.php.
10 Feb 2021
9.8
CVSS
CVE-2019-16894CRITICALpoc
download.php in inoERP 4.15 allows SQL injection through insecure deserialization.
26 Sep 2019
9.8
CVSS
← PrevPage 1 / 1Next →