CVE-2020-37082高 7.5webERP 4.15.1 contains an unauthenticated file access vulnerability that allows remote attackers to download database backup files without a…
CVE-2025-46053中 5.1A SQL Injection vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL commands and extract sensitive data by injecting a…
CVE-2025-46052緊急 9.8An error-based SQL Injection (SQLi) vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL command and extract sensitive …
CVE-2019-7755高 8.8In webERP 4.15, the Import Bank Transactions function fails to sanitize the content of imported MT940 bank statement files, resulting in the…
CVE-2019-13292緊急 9.8A SQL Injection issue was discovered in webERP 4.15. Payments.php accepts payment data in base64 format. After this is decoded, it is deseri…