CVE advisoryCRITICAL
CVE-2025-4738
MY ERP SQL Injection Vulnerability
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical SQL injection vulnerability exists in Yirmibes Software MY ERP, enabling attackers to manipulate database commands. This could result in unauthorized access to or modification of sensitive business data. This threat is relevant because MY ERP is enterprise resource planning software, often network-accessible