Ebrigade vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Ebrigade products: 1 record(s), with severity, exploitation and fixes.

Ebrigade 1 eBrigade ERP 1

Exploited only (KEV) →

CVE-2019-25707 High · 7.1 CWE-89 Apr 12, 2026

eBrigade ERP 4.5 SQL Injection via pdf.php

eBrigade ERP 4.5 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. Attackers can send GET requests to pdf.php with crafted SQL payloads in the 'id' parameter to extract sensitive database information including table names and schema details.