Vulnerability index

Browse CVEs

10 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Weberp HIGH 7.5
CVE-2020-37082

webERP 4.15.1 contains an unauthenticated file access vulnerability that allows remote attackers to download database backup files without authentica…

No fix yet
Fix from $1,950 2026-02-03
Weberp MEDIUM 5.1
CVE-2025-46053

A SQL Injection vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL commands and extract sensitive data by injecting a crafted …

No fix yet
Fix from $1,600 2025-05-15
Weberp CRITICAL 9.8
CVE-2025-46052

An error-based SQL Injection (SQLi) vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL command and extract sensitive data by i…

No fix yet
Fix from $2,300 2025-05-15
D2files CRITICAL 9.8
CVE-2015-10018

A vulnerability has been found in DBRisinajumi d2files and classified as critical. Affected by this vulnerability is the function actionUpload/action…

Fix: 1.0.0+
Fix from $2,300 2023-01-06
Weberp MEDIUM 6.5
CVE-2020-22474

In webERP 4.15, the ManualContents.php file allows users to specify the "Language" parameter, which can lead to local file inclusion.

Patch available
Fix from $1,600 2021-02-22
Weberp HIGH 8.8
CVE-2019-7755

In webERP 4.15, the Import Bank Transactions function fails to sanitize the content of imported MT940 bank statement files, resulting in the executio…

No fix yet
Fix from $1,950 2020-03-30
Weberp CRITICAL 9.8
CVE-2019-13292EPSS 9%

A SQL Injection issue was discovered in webERP 4.15. Payments.php accepts payment data in base64 format. After this is decoded, it is deserialized. T…

No fix yet
Fix from $2,300 2019-07-04
Weberp HIGH 7.2
CVE-2018-19434

An issue was discovered on the "Bank Account Matching - Receipts" screen of the General Ledger component in webERP 4.15. BankMatching.php has Blind S…

No fix yet
Fix from $1,950 2018-11-22
Weberp HIGH 7.2
CVE-2018-19435

An issue was discovered in the Sales component in webERP 4.15. SalesInquiry.php has SQL Injection via the SortBy parameter.

No fix yet
Fix from $1,950 2018-11-22
Weberp HIGH 7.2
CVE-2018-19436

An issue was discovered in the Manufacturing component in webERP 4.15. CollectiveWorkOrderCost.php has Blind SQL Injection via the SearchParts parame…

No fix yet
Fix from $1,950 2018-11-22