CVE-2019-16894

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• inoERP 4.15 - 'download' SQL Injection2019-09-26 · webapps · php

Impact

download.php in inoERP 4.15 allows SQL injection through insecure deserialization.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://www.exploit-db.com/exploits/47426
• https://www.exploit-db.com/exploits/47426