CVE-2019-5893

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• OpenSource ERP 6.3.1. - SQL Injection2019-01-10 · webapps · multiple

Impact

Nelson Open Source ERP v6.3.1 allows SQL Injection via the db/utils/query/data.xml query parameter.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/EmreOvunc/OpenSource-ERP-SQL-Injection
• https://www.exploit-db.com/exploits/46118/
• https://github.com/EmreOvunc/OpenSource-ERP-SQL-Injection
• https://www.exploit-db.com/exploits/46118/