Browse CVEs

HIGH 7.5 CVE-2020-37082 webERP 4.15.1 contains an unauthenticated file access vulnerability that allows remote attackers to download database backup files without authentica… Weberp No fix yet Fix from $1,9502026-02-03 MEDIUM 5.1 CVE-2025-46053 A SQL Injection vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL commands and extract sensitive data by injecting a crafted … Weberp No fix yet Fix from $1,6002025-05-15 CRITICAL 9.8 CVE-2025-46052 An error-based SQL Injection (SQLi) vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL command and extract sensitive data by i… Weberp No fix yet Fix from $2,3002025-05-15 CRITICAL 9.8 CVE-2015-10018 A vulnerability has been found in DBRisinajumi d2files and classified as critical. Affected by this vulnerability is the function actionUpload/action… D2files 1.0.0+ Fix from $2,3002023-01-06 MEDIUM 6.5 CVE-2020-22474 In webERP 4.15, the ManualContents.php file allows users to specify the "Language" parameter, which can lead to local file inclusion. Weberp Patch available Fix from $1,6002021-02-22 HIGH 8.8 CVE-2019-7755 In webERP 4.15, the Import Bank Transactions function fails to sanitize the content of imported MT940 bank statement files, resulting in the executio… Weberp No fix yet Fix from $1,9502020-03-30 CRITICAL 9.8 CVE-2019-13292EPSS 9% A SQL Injection issue was discovered in webERP 4.15. Payments.php accepts payment data in base64 format. After this is decoded, it is deserialized. T… Weberp No fix yet Fix from $2,3002019-07-04 HIGH 7.2 CVE-2018-19434 An issue was discovered on the "Bank Account Matching - Receipts" screen of the General Ledger component in webERP 4.15. BankMatching.php has Blind S… Weberp No fix yet Fix from $1,9502018-11-22 HIGH 7.2 CVE-2018-19435 An issue was discovered in the Sales component in webERP 4.15. SalesInquiry.php has SQL Injection via the SortBy parameter. Weberp No fix yet Fix from $1,9502018-11-22 HIGH 7.2 CVE-2018-19436 An issue was discovered in the Manufacturing component in webERP 4.15. CollectiveWorkOrderCost.php has Blind SQL Injection via the SearchParts parame… Weberp No fix yet Fix from $1,9502018-11-22