Successful exploitation of this vulnerability could allow the attacker to perform SQL injection attacks on the targeted system.
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Manacle Technologies | Multi-tenant ERP System | unaffected |
|
No data.
No data.
No data available yet.
Vendor Solution
Contact Manacle Technologies for the patched version.
Tracking
Sign in to view the affected projects.
No advisories yet.
Wed, 07 Oct 2026 08:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | This vulnerability exists in the ERP system due to insufficient validation and parameterization of user supplied input in an API endpoint. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted input to the vulnerable endpoint. Successful exploitation of this vulnerability could allow the attacker to perform SQL injection attacks on the targeted system. | |
| Title | SQL Injection Vulnerability in Manacle Technologies ERP System | |
| First Time appeared |
Manacle Technologies
Manacle Technologies multi-tenant Erp System |
|
| Weaknesses | CWE-89 | |
| CPEs | cpe:2.3:a:manacle_technologies:multi-tenant_erp_system:version:*:*:*:*:*:*:* | |
| Vendors & Products |
Manacle Technologies
Manacle Technologies multi-tenant Erp System |
|
| References |
| |
| Metrics |
cvssV4_0
|
MITRE
Status: PUBLISHED
Assigner: CERT-In
Published:
Updated: 2026-10-07T08:21:22.512Z
Reserved: 2026-10-07T06:16:49.039Z
Link: CVE-2026-107103
Vulnrichment
No data.
NVD
No data.
Redhat
No data.
OpenCVE Enrichment
No data.
-
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')