description: SAP Business One allows an attacker with business privileges to execute crafted database queries, exposing the back-end database. Due to framework restrictions, only some information can be obtained.
problem types: SQL Injection
affected:
{
product: SAP Business One
vendor: SAP SE
versions:
status: affected, version: < 10.0
}