Vulnerability index

Browse CVEs

8 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Weberp HIGH 7.5
CVE-2020-37082

webERP 4.15.1 contains an unauthenticated file access vulnerability that allows remote attackers to download database backup files without authentica…

No fix yet
Fix from $1,950 2026-02-03
Weberp MEDIUM 5.1
CVE-2025-46053

A SQL Injection vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL commands and extract sensitive data by injecting a crafted …

No fix yet
Fix from $1,600 2025-05-15
Weberp CRITICAL 9.8
CVE-2025-46052

An error-based SQL Injection (SQLi) vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL command and extract sensitive data by i…

No fix yet
Fix from $2,300 2025-05-15
Weberp HIGH 8.8
CVE-2019-7755

In webERP 4.15, the Import Bank Transactions function fails to sanitize the content of imported MT940 bank statement files, resulting in the executio…

No fix yet
Fix from $1,950 2020-03-30
Weberp CRITICAL 9.8
CVE-2019-13292EPSS 9%

A SQL Injection issue was discovered in webERP 4.15. Payments.php accepts payment data in base64 format. After this is decoded, it is deserialized. T…

No fix yet
Fix from $2,300 2019-07-04
Weberp HIGH 7.2
CVE-2018-19434

An issue was discovered on the "Bank Account Matching - Receipts" screen of the General Ledger component in webERP 4.15. BankMatching.php has Blind S…

No fix yet
Fix from $1,950 2018-11-22
Weberp HIGH 7.2
CVE-2018-19435

An issue was discovered in the Sales component in webERP 4.15. SalesInquiry.php has SQL Injection via the SortBy parameter.

No fix yet
Fix from $1,950 2018-11-22
Weberp HIGH 7.2
CVE-2018-19436

An issue was discovered in the Manufacturing component in webERP 4.15. CollectiveWorkOrderCost.php has Blind SQL Injection via the SearchParts parame…

No fix yet
Fix from $1,950 2018-11-22