CVE-2019-5893

Nelson Open Source ERP v6.3.1 allows SQL Injection via the db/utils/query/data.xml query parameter...

PT-2019-17851

Name of the Vulnerable Software and Affected Versions Nelson Open Source ERP version 6.3.1 Description The issue allows SQL Injection via the db/utils/query/data.xml query parameter. This means an attacker could potentially inject malicious SQL code to manipulate the database. Recommendations For...

CVE-2019-5893: Improper Neutralization of Special Elements used in an SQL Command

Nelson Open Source ERP v6.3.1 allows SQL Injection via the db/utils/query/data.xml query parameter...