| Package | Affected versions | Patched versions |
|---|---|---|
| weberp | = 4.15.1 |
webERP 4.15.1 contains an unauthenticated file access vulnerability that allows remote attackers to download database backup files without authentication. Attackers can directly access generated backup files in the companies/weberp/ directory by requesting the Backup_[timestamp].sql.gz file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free