Abc-Erp vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Abc-Erp products: 1 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2018-25174 Medium · 5.3 CWE-352 Mar 6, 2026

ABC ERP 0.6.4 Cross-Site Request Forgery via _configurar_perfil.php

ABC ERP 0.6.4 contains a cross-site request forgery vulnerability that allows attackers to modify administrator credentials by submitting forged requests to _configurar_perfil.php. Attackers can craft malicious forms or links containing parameters like usuario, contrasena1, contrasena2, nombre, and email to change admin account settings without authentication.