webERP SQL Injection Vulnerability (CNVD-2020-20677)

webERP is an open source inventory and financial management system ERP system. The system supports inventory management , rights role management , order management and financial management . A SQL injection vulnerability exists in webERP 4.15. The vulnerability stems from a lack of validation of...