webERP 4.05 Cross Site Scripting / SQL Injection

Vulnerability ID: HTB23055 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinweberp.html Product: webERP Vendor: www.weberp.org http://www.weberp.org Vulnerable Version: 4.05 and probably prior Tested Version: 4.05 Vendor Notification: 26 October 2011 Vulnerability Type: XSS, S...

webERP 4.3.8 - '/reportwriter/ReportMaker.php?reportid' SQL Injection

source: https://www.securityfocus.com/bid/50713/info webERP is prone to information-disclosure, SQL-injection, and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may exploit the information-disclosure issue to gain access to sensiti...

webERP 4.3.8 - Multiple Script URI Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50713/info webERP is prone to information-disclosure, SQL-injection, and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may exploit the information-disclosure issue to gain access to sensiti...

webERP 4.3.8 - '/reportwriter/FormMaker.php?ReportID' SQL Injection

source: https://www.securityfocus.com/bid/50713/info webERP is prone to information-disclosure, SQL-injection, and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may exploit the information-disclosure issue to gain access to sensiti...

webERP 4.3.8 - reportwriterFormMaker.php?ReportID SQL Injection

webERP 4.3.8 - reportwriterFormMaker.php?ReportID SQL Injection source: https://www.securityfocus.com/bid/50713/info webERP is prone to information-disclosure, SQL-injection, and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may...

Multiple Vulnerabilities in webERP

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in webERP, which can be exploited to perform information disclosure, cross-site scripting and SQL injection attacks. 1 Cross-Site Scripting XSS vulnerabilities in webERP Input appended to the URL in multiple files i...

webERP 4.03.08 Cross Site Scripting

------------------------------------------------------------------------ --Description-- A reflected cross-site scripting vulnerability in webERP 4.03.8 can be exploited to execute arbitrary JavaScript. --PoC-- alert0" /...

webERP 4.0.1 Shell Upload

------------------------------------------------------------------------ Software................webERP 4.0.1 Vulnerability...........Arbitrary Upload Download................http://www.weberp.org/ Release Date............2/10/2011 Tested On...............Windows Vista + XAMPP...

webERP 4.0.1 - InputSerialItemsFile.php Arbitrary File Upload

webERP 4.0.1 - InputSerialItemsFile.php Arbitrary File Upload source: https://www.securityfocus.com/bid/46341/info webERP is prone to an arbitrary-file-upload vulnerability because the application fails to adequately sanitize user-supplied input. An attacker can exploit this issue to upload...

webERP 4.0.1 - 'InputSerialItemsFile.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/46341/info webERP is prone to an arbitrary-file-upload vulnerability because the application fails to adequately sanitize user-supplied input. An attacker can exploit this issue to upload arbitrary code and run it in the context of the webserver process...

webERP 3.11.4 Cross Site Request Forgery

Title: webERP Multiple Vulnerabilities Author: ADEO Security Published: 30/06/2010 Version: 3.11.4 Possible all versions Vendor: http://www.weberp.org Description: "webERP is a complete web based accounting/ERP system that requires only a web-browser and pdf reader to use. It has a wide range of...

webERP v3.11.4 Multiple Vulnerabilities

Exploit for php platform in category web applications ======================================= webERP v3.11.4 Multiple Vulnerabilities ======================================= Title: webERP Multiple Vulnerabilities Author: ADEO Security Published: 30/06/2010 Version: 3.11.4 Possible all versions...

webERP 3.11.4 - Multiple Vulnerabilities

webERP 3.11.4 - Multiple Vulnerabilities Title: webERP Multiple Vulnerabilities Author: ADEO Security Published: 30/06/2010 Version: 3.11.4 Possible all versions Vendor: http://www.weberp.org Description: "webERP is a complete web based accounting/ERP system that requires only a web-browser and p...

webERP 3.11.4 - Multiple Vulnerabilities

Title: webERP Multiple Vulnerabilities Author: ADEO Security Published: 30/06/2010 Version: 3.11.4 Possible all versions Vendor: http://www.weberp.org Description: "webERP is a complete web based accounting/ERP system that requires only a web-browser and pdf reader to use. It has a wide range of...

Joomla webERPcustomer Local File Inclusion

--------------------------------------------------------------------------------- Joomla Component webERPcustomer Local File Inclusion --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatinHackTeam Email & msn : [email protected]...

Joomla Component com_weberpcustomer Local File Inclusion

Exploit for php platform in category web applications ======================================================== Joomla Component comweberpcustomer Local File Inclusion ========================================================...

Joomla! Component webERPcustomer - Local File Inclusion

--------------------------------------------------------------------------------- Joomla Component webERPcustomer Local File Inclusion --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatinHackTeam Email & msn : [email protected]...

webERP Configuration File Remote Access

The remote host is using webERP, a web-based accounting / ERP software. There is a flaw in the version of webERP on the remote host such that an attacker is able to download the application's configuration file, 'logicworks.ini', containing the database username and password. %NASLMINLEVEL 70300 ...