CVE-2020-37082高 7.5webERP 4.15.1 contains an unauthenticated file access vulnerability that allows remote attackers to download database backup files without a…
CVE-2025-46053中 5.1A SQL Injection vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL commands and extract sensitive data by injecting a…
CVE-2025-46052緊急 9.8An error-based SQL Injection (SQLi) vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL command and extract sensitive …
CVE-2020-22474中 6.5In webERP 4.15, the ManualContents.php file allows users to specify the "Language" parameter, which can lead to local file inclusion.
CVE-2019-7755高 8.8In webERP 4.15, the Import Bank Transactions function fails to sanitize the content of imported MT940 bank statement files, resulting in the…