📦 Exito

This SQL injection vulnerability in Sergestec's Exito v8.0 allows attackers to manipulate database queries through the 'cat' parameter in '/public.php'. Attackers can retrieve, modify, create, or dele...

This CVE describes an Insecure Direct Object Reference (IDOR) vulnerability in Sergestec's Exito v8.0 that allows attackers to access other customers' data by manipulating the 'id' parameter in the '/...