2 matches found
CVE-2018-20420
In webERP 4.15, ZCreateCompanyTemplateFile.php has Incorrect Access Control, leading to the overwrite of an existing .sql file on the target web site by creating a template and then using ../ directory traversal in the TemplateName parameter...
5.5CVSS6.8AI score0.00962EPSS
SaveExploits1References1
CVE-2018-20420
In webERP 4.15, ZCreateCompanyTemplateFile.php has Incorrect Access Control, leading to the overwrite of an existing .sql file on the target web site by creating a template and then using ../ directory traversal in the TemplateName parameter...
5.5CVSS5.2AI score0.00962EPSS
SaveExploits1References1
20