high7.2
CVE-2018-19436
An issue was discovered in the Manufacturing component in webERP 4.15.
Impact
An issue was discovered in the Manufacturing component in webERP 4.15. CollectiveWorkOrderCost.php has Blind SQL Injection via the SearchParts parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Weberp | Weberp | Version 4.15 |