CVE-2018-19435

Impact

An issue was discovered in the Sales component in webERP 4.15. SalesInquiry.php has SQL Injection via the SortBy parameter.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/0xUhaw/CVE-Bins/tree/master/webERP%20SQLI-1
• https://github.com/0xUhaw/CVE-Bins/tree/master/webERP%20SQLI-1