| Package | Affected versions | Patched versions |
|---|---|---|
| weberp | = 4.15 |
In webERP 4.15, the Import Bank Transactions function fails to sanitize the content of imported MT940 bank statement files, resulting in the execution of arbitrary SQL queries, aka SQL Injection.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free