CVE-2018-19436

An issue was discovered in the Manufacturing component in webERP 4.15. CollectiveWorkOrderCost.php has Blind SQL Injection via the SearchParts parameter...

Sql injection

An issue was discovered on the "Bank Account Matching - Receipts" screen of the General Ledger component in webERP 4.15. BankMatching.php has Blind SQL injection via the AmtClear parameter...

Sql injection

An issue was discovered in the Sales component in webERP 4.15. SalesInquiry.php has SQL Injection via the SortBy parameter...

Sql injection

An issue was discovered in the Manufacturing component in webERP 4.15. CollectiveWorkOrderCost.php has Blind SQL Injection via the SearchParts parameter...

CVE-2018-19434

An issue was discovered on the "Bank Account Matching - Receipts" screen of the General Ledger component in webERP 4.15. BankMatching.php has Blind SQL injection via the AmtClear parameter...

CVE-2018-19435

An issue was discovered in the Sales component in webERP 4.15. SalesInquiry.php has SQL Injection via the SortBy parameter...

CVE-2018-19436

An issue was discovered in the Manufacturing component in webERP 4.15. CollectiveWorkOrderCost.php has Blind SQL Injection via the SearchParts parameter...

CVE-2018-19434

An issue was discovered on the "Bank Account Matching - Receipts" screen of the General Ledger component in webERP 4.15. BankMatching.php has Blind SQL injection via the AmtClear parameter...

CVE-2018-19435

An issue was discovered in the Sales component in webERP 4.15. SalesInquiry.php has SQL Injection via the SortBy parameter...

CVE-2018-19436

An issue was discovered in the Manufacturing component in webERP 4.15. CollectiveWorkOrderCost.php has Blind SQL Injection via the SearchParts parameter...

CVE-2018-19434

The CVE-2018-19434 issue affects webERP 4.15 within the General Ledger component, specifically the Bank Account Matching - Receipts screen. BankMatching.php contains a Blind SQL injection vulnerability via the AmtClear_ parameter that can be exploited remotely to execute SQL commands. This vulner...

CVE-2018-19435

CVE-2018-19435 describes a SQL injection in webERP 4.15, specifically in the Sales component's file SalesInquiry.php, exploitable through the SortBy parameter. Root cause per the description is unsanitized user input allowing injection into SQL queries, leading to potential disclosure/modificatio...

CVE-2018-19436

CVE-2018-19436 affects webERP v4.15, specifically the Manufacturing component. The vulnerability is a Blind SQL Injection in CollectiveWorkOrderCost.php exposed via the SearchParts parameter. This is documented across multiple feeds (NVD entry and mirrored records) and is described as a SQL injec...

webERP Manufacturing Component SQL Injection Vulnerability

webERP is an open source inventory and financial management system ERP system. The system supports inventory management , rights role management , order management and financial management , etc. Manufacturing is one of the components . webERP 4.15 version of the Manufacturing component of the...

webERP Sales Component SQL Injection Vulnerability

webERP is an open source inventory and financial management system ERP system. The system supports inventory management , rights role management , order management and financial management , etc. Sales is one of the sales component . webERP 4.15 version of the Sales component of the...

webERP General Ledger Component SQL Injection Vulnerability

webERP is an open source inventory and financial management system ERP system. The system supports inventory management , rights role management , order management and financial management , etc. General Ledger is one of the ledger components . A SQL injection vulnerability exists in the 'Bank...

PT-2018-14962

Name of the Vulnerable Software and Affected Versions webERP version 4.15 Description An issue was discovered in the Manufacturing component. It has Blind SQL Injection via the SearchParts parameter in CollectiveWorkOrderCost.php. Recommendations For webERP version 4.15, avoid using the SearchPar...

PT-2018-14961

Name of the Vulnerable Software and Affected Versions webERP version 4.15 Description An issue was discovered in the Sales component. The SalesInquiry.php file has SQL Injection via the SortBy parameter. Recommendations For webERP version 4.15, avoid using the SortBy parameter in the...

PT-2018-14960

Name of the Vulnerable Software and Affected Versions webERP version 4.15 Description An issue was discovered on the Bank Account Matching - Receipts screen of the General Ledger component. This issue involves Blind SQL injection via the AmtClear parameter in BankMatching.php. Recommendations For...

CVE-2018-19434: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered on the "Bank Account Matching - Receipts" screen of the General Ledger component in webERP 4.15. BankMatching.php has Blind SQL injection via the AmtClear parameter...