Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in the Manufacturing component in webERP 4.15. CollectiveWorkOrderCost.php has Blind SQL Injection via the SearchParts parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
webERP Manufacturing组件SQL注入漏洞
Vulnerability Description
webERP是一套开源的进销存与财务管理系统（ERP系统）。该系统支持库存管理、权限角色管理、订单管理和财务管理等。Manufacturing是其中的一个组件。 webERP 4.15版本中的Manufacturing组件的CollectiveWorkOrderCost.php文件存在SQL注入漏洞。远程攻击者可借助‘SearchParts’参数利用该漏洞获取企业ERP的敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A