CVE-2025-46053: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL commands and extract sensitive data by injecting a crafted payload into the ReportID and ReplaceReportID parameters within a POST request to /reportwriter/admin/ReportCreator.php...

WebERP 安全漏洞

webERP is an open source inventory and financial management system ERP system by Tim Schofield, an individual developer. The system supports inventory management, permission role management, order management and financial management. A security vulnerability exists in WebERP v4.15.2, which...

CVE-2005-3451

Unspecified vulnerability in SQLReportWriter in Oracle Application Server 9.0 up to 9.0.2.1 has unknown impact and attack vectors, as identified by Oracle Vuln AS10...

CVE-2005-3451

Technical details for CVE-2005-3451 are not provided in the supplied documents. No affected products or fixes are specified. Monitor for updates.

CVE-2005-3451

Unspecified vulnerability in SQLReportWriter in Oracle Application Server 9.0 up to 9.0.2.1 has unknown impact and attack vectors, as identified by Oracle Vuln AS10...

CVE-2005-3451: Undefined Security Weakness

Unspecified vulnerability in SQLReportWriter in Oracle Application Server 9.0 up to 9.0.2.1 has unknown impact and attack vectors, as identified by Oracle Vuln AS10...

Oracle Application Server SQL*ReportWriter vulnerability

Overview An unspecified vulnerability in the Oracle SQLReportWriter may allow a remote, unauthenticated attacker to compromise system confidentiality and integrity. Description Oracle SQLReportWriter is a component of the Oracle Application Server. There is an vulnerability in the Oracle...