← back
CVE-2019-13292

CVE-2019-13292

EPSS 6.5%
A SQL Injection issue was discovered in webERP 4.15. Payments.php accepts payment data in base64 format. After this is decoded, it is deserialized. Then, this deserialized data goes directly into a SQL query, with no sanitizing checks.
Affected products
n/a · n/a
public PoCs found — 2
githubgithub.com/alealeluyah/CVE-2019-13292-WebERP_4.15★ 2cve_referencewww.exploit-db.com/exploits/47013unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://www.exploit-db.com/exploits/47013