CVE-2024-44756

Name of the Vulnerable Software and Affected Versions NUS-M9 ERP Management Software version 3.0.0

Description The issue is a SQL injection vulnerability that can be exploited via the usercode parameter at the "/UserWH/checkLogin" API endpoint. This allows for potential unauthorized access to sensitive data.

Recommendations For NUS-M9 ERP Management Software version 3.0.0, as a temporary workaround, consider restricting access to the "/UserWH/checkLogin" API endpoint or sanitizing the usercode parameter to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.