CVE-2019-7755

In webERP 4.15, the Import Bank Transactions function fails to sanitize the content of imported MT940 bank statement files, resulting in the execution of arbitrary SQL queries, aka SQL Injection...

Sql injection

In webERP 4.15, the Import Bank Transactions function fails to sanitize the content of imported MT940 bank statement files, resulting in the execution of arbitrary SQL queries, aka SQL Injection...

CVE-2019-7755

CVE-2019-7755 affects webERP 4.15 where the Import Bank Transactions function fails to sanitize MT940 files, enabling arbitrary SQL queries (SQL Injection). Root cause: missing input validation in the MT940 importer. Impact: high (per CVSS3.1), with potential leakage/modification of data and disr...

CVE-2019-7755

In webERP 4.15, the Import Bank Transactions function fails to sanitize the content of imported MT940 bank statement files, resulting in the execution of arbitrary SQL queries, aka SQL Injection...

CVE-2019-7755: Improper Neutralization of Special Elements used in an SQL Command

In webERP 4.15, the Import Bank Transactions function fails to sanitize the content of imported MT940 bank statement files, resulting in the execution of arbitrary SQL queries, aka SQL Injection...