CVE-2019-13292-WebERP_4.15

Exploit de Inyección SQL Ciega para WebERP Este es un script de Python3 que demuestra un exploit para una vulnerabilidad de Inyección SQL Ciega en WebERP versión 4.15, descubierta inicialmente por Semen Alexandrovich Lyhin el 10 de junio de 2019. El exploit original se puede encontrar aquí, y se...

CVE-2019-13292

A SQL Injection issue was discovered in webERP 4.15. Payments.php accepts payment data in base64 format. After this is decoded, it is deserialized. Then, this deserialized data goes directly into a SQL query, with no sanitizing checks...

CVE-2019-13292

A SQL Injection issue was discovered in webERP 4.15. Payments.php accepts payment data in base64 format. After this is decoded, it is deserialized. Then, this deserialized data goes directly into a SQL query, with no sanitizing checks...

Sql injection

A SQL Injection issue was discovered in webERP 4.15. Payments.php accepts payment data in base64 format. After this is decoded, it is deserialized. Then, this deserialized data goes directly into a SQL query, with no sanitizing checks...

CVE-2019-13292: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection issue was discovered in webERP 4.15. Payments.php accepts payment data in base64 format. After this is decoded, it is deserialized. Then, this deserialized data goes directly into a SQL query, with no sanitizing checks...