CVE-2019-7755

In webERP 4.15, the Import Bank Transactions function fails to sanitize the content of imported MT940 bank statement files, resulting in the execution of arbitrary SQL queries, aka SQL Injection.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2020-03-30

Last modified

2024-08-04

Weaknesses

CWE-89

Affected products

• Weberp (Weberp)

References

• https://www.exploit-database.net/?id=101060
• https://www.exploit-db.com/exploits/46431/
• https://www.weberp.org