Required CVE Record Information
Description
In webERP 4.15, the Import Bank Transactions function fails to sanitize the content of imported MT940 bank statement files, resulting in the execution of arbitrary SQL queries, aka SQL Injection.
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 3 Total
- https://www.exploit-db.com/exploits/46431/ x_transferred
- https://www.weberp.org x_transferred
- https://www.exploit-database.net/?id=101060 x_transferred