CVE-2018-19434

An issue was discovered on the "Bank Account Matching - Receipts" screen of the General Ledger component in webERP 4.15. BankMatching.php has Blind SQL injection via the AmtClear_ parameter.

Score

CVSS 3.0 7.2 High

Status

Modified - cve@mitre.org

Published

2018-11-22

Last modified

2024-08-05

Weaknesses

CWE-89

Affected products

• Weberp (Weberp)

References

• https://github.com/eddietcc/CVEnotes/tree/master/webERP_4.15_BankMatching