CVE-2018-19436: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in the Manufacturing component in webERP 4.15. CollectiveWorkOrderCost.php has Blind SQL Injection via the SearchParts parameter...