Логотип exploitDog
bind:CVE-2025-46053
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-46053

Количество 2

Количество 2

nvd логотип

CVE-2025-46053

9 месяцев назад

A SQL Injection vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL commands and extract sensitive data by injecting a crafted payload into the ReportID and ReplaceReportID parameters within a POST request to /reportwriter/admin/ReportCreator.php

CVSS3: 5.1
EPSS: Низкий
github логотип

GHSA-775f-97x4-x974

9 месяцев назад

A SQL Injection vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL commands and extract sensitive data by injecting a crafted payload into the ReportID and ReplaceReportID parameters within a POST request to /reportwriter/admin/ReportCreator.php

CVSS3: 5.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-46053

A SQL Injection vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL commands and extract sensitive data by injecting a crafted payload into the ReportID and ReplaceReportID parameters within a POST request to /reportwriter/admin/ReportCreator.php

CVSS3: 5.1
0%
Низкий
9 месяцев назад
github логотип
GHSA-775f-97x4-x974

A SQL Injection vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL commands and extract sensitive data by injecting a crafted payload into the ReportID and ReplaceReportID parameters within a POST request to /reportwriter/admin/ReportCreator.php

CVSS3: 5.1
0%
Низкий
9 месяцев назад

Уязвимостей на страницу