CVE-2019-7755

2020-03-3017:15:14

Google

osv.dev

AI Score

7.6

Confidence

High

EPSS

0.003

Percentile

66.4%

JSON

In webERP 4.15, the Import Bank Transactions function fails to sanitize the content of imported MT940 bank statement files, resulting in the execution of arbitrary SQL queries, aka SQL Injection.

References

www.exploit-database.net/?id=101060

www.exploit-db.com/exploits/46431/

www.weberp.org