CVE-2018-19434: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered on the "Bank Account Matching - Receipts" screen of the General Ledger component in webERP 4.15. BankMatching.php has Blind SQL injection via the AmtClear parameter...