CVE-2018-19434

2018-11-2205:00:00

mitre

www.cve.org

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

39.3%

JSON

An issue was discovered on the “Bank Account Matching - Receipts” screen of the General Ledger component in webERP 4.15. BankMatching.php has Blind SQL injection via the AmtClear_ parameter.

References

github.com/eddietcc/CVEnotes/tree/master/webERP_4.15_BankMatching