← Back to CVE List

CVE-2019-7755

Published: 2020-03-30T17:15Z
Last Modified: 2024-11-21T04:48Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
In webERP 4.15, the Import Bank Transactions function fails to sanitize the content of imported MT940 bank statement files, resulting in the execution of arbitrary SQL queries, aka SQL Injection. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt