Weberp vulnerabilities

Products

• Weberp 11

Newest

• weberp webERP 4.15.1 - Unauthenticated Backup File Access CVE-2020-37082 8.6 HighFebruary 3, 2026
• weberp A SQL Injection vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL... CVE-2025-46053 5.1 MediumMay 15, 2025
• weberp An error-based SQL Injection (SQLi) vulnerability in WebERP v4.15.2 allows attackers to execute... CVE-2025-46052 9.8 CriticalMay 15, 2025
• timschofield weberp timschofield webERP Confirm Dispatch and Invoice Page ConfirmDispatch_Invoice.php cross site scripting CVE-2025-2715 5.1 MediumMarch 24, 2025
• dbrisinajumi d2files DBRisinajumi d2files D2filesController.php actionDownloadFile sql injection CVE-2015-10018 Fix available 5.5 MediumJanuary 6, 2023
• weberp In webERP 4.15, the ManualContents.php file allows users to specify the "Language" parameter,... CVE-2020-22474 6.5 MediumFebruary 22, 2021
• weberp In webERP 4.15, the Import Bank Transactions function fails to sanitize the content of imported... CVE-2019-7755 8.8 HighMarch 30, 2020
• weberp A SQL Injection issue was discovered in webERP 4.15. Payments.php accepts payment data in base64... CVE-2019-13292 Public exploit 9.8 CriticalJuly 4, 2019
• weberp In webERP 4.15, Z_CreateCompanyTemplateFile.php has Incorrect Access Control, leading to the... CVE-2018-20420 4.9 MediumDecember 24, 2018
• weberp An issue was discovered in the Manufacturing component in webERP 4.15. CollectiveWorkOrderCost... CVE-2018-19436 7.2 HighNovember 22, 2018
• weberp An issue was discovered in the Sales component in webERP 4.15. SalesInquiry.php has SQL Injection... CVE-2018-19435 7.2 HighNovember 22, 2018
• weberp An issue was discovered on the "Bank Account Matching - Receipts" screen of the General Ledger component in webERP 4.15. BankMatching.php has Blind SQL injection via the AmtClear_ parameter. CVE-2018-19434 7.2 HighNovember 22, 2018