Leo Huang

**Name of the Vulnerable Software and Affected Versions** ERP App developed by PROG MIS (affected versions not specified) **Description** The application contains hard-coded credentials, which are passwords or usernames embedded directly into the software source code. This allows unauthenticated remote attackers to log in, view the application code, and obtain the database account and password. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Prog Management System (affected versions not specified) **Description** An exposure of sensitive information exists in the software developed by PROG MIS. This flaw allows unauthenticated remote attackers to access a specific page to obtain the database account and password. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Prog Management System (affected versions not specified) **Description** An issue exists that allows unauthenticated remote attackers to execute arbitrary SQL commands. This can lead to unauthorized access and reading of database contents through SQL Injection, a technique where malicious SQL statements are inserted into entry fields for execution.** **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.