Ury-erp vulnerabilities
We track 1 vulnerability in Ury-erp products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 14, 2025.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Ury-erp vulnerabilities
- 9.8 Critical severity
ury: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in ury-erp ury up to 0.2.0. This affects the function overrided_past_order_list of the file ury/ury/api/pos_extend.py. This manipulation of the argument search_term causes sql injection. Remote exploitation of the attack is possi