Weberp records
11 published records for vendor weberp.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 9.1%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')8
- CWE-552 Files or Directories Accessible to External Parties1
- CWE-732 Incorrect Permission Assignment for Critical Resource1
- CWE-829 Inclusion of Functionality from Untrusted Control Sphere1
The weakness classes this vendor ships most often: where to look.
CWEAll records
11 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
42Plan | CVE-2019-13292Proof of concept | A SQL Injection issue was discovered in webERP 4.15.weberp · weberp · CWE-89 | Critical9.8 | — | 9.2% | Jul 4, 2019 |
39Monitor | CVE-2015-10018No exploit | DBRisinajumi d2files D2filesController.php actionDownloadFile sql injectionweberp · d2files · CWE-89 | Critical9.8 | — | 0.7% | Jan 6, 2023 |
39Monitor | CVE-2025-46052No exploit | An error-based SQL Injection (SQLi) vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL command and extract sensitive weberp · weberp · CWE-89 | Critical9.8 | — | 0.5% | May 15, 2025 |
36Monitor | CVE-2019-7755No exploit | In webERP 4.15, the Import Bank Transactions function fails to sanitize the content of imported MT940 bank statement files, resulting in theweberp · weberp · CWE-89 | High8.8 | — | 2.1% | Mar 30, 2020 |
34Monitor | CVE-2020-37082No exploit | webERP 4.15.1 - Unauthenticated Backup File Accessweberp · weberp · CWE-552 | High8.6 | — | 0.6% | Feb 3, 2026 |
28Monitor | CVE-2018-19435No exploit | An issue was discovered in the Sales component in webERP 4.15.weberp · weberp · CWE-89 | High7.2 | — | 1.0% | Nov 22, 2018 |
28Monitor | CVE-2018-19436No exploit | An issue was discovered in the Manufacturing component in webERP 4.15.weberp · weberp · CWE-89 | High7.2 | — | 1.0% | Nov 22, 2018 |
28Monitor | CVE-2018-19434No exploit | An issue was discovered on the "Bank Account Matching - Receipts" screen of the General Ledger component in webERP 4.15.weberp · weberp · CWE-89 | High7.2 | — | 1.0% | Nov 22, 2018 |
26Monitor | CVE-2020-22474No exploit | In webERP 4.15, the ManualContents.php file allows users to specify the "Language" parameter, which can lead to local file inclusion.weberp · weberp · CWE-829 | Medium6.5 | — | 1.0% | Feb 22, 2021 |
20Monitor | CVE-2025-46053No exploit | A SQL Injection vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL commands and extract sensitive data by injecting aweberp · weberp · CWE-89 | Medium5.1 | — | 0.2% | May 15, 2025 |
19Monitor | CVE-2018-20420No exploit | In webERP 4.15, Z_CreateCompanyTemplateFile.php has Incorrect Access Control, leading to the overwrite of an existing .sql file on the targeweberp · weberp · CWE-732 | Medium4.9 | — | 0.9% | Dec 23, 2018 |
- CVE-2019-1329242Plan
A SQL Injection issue was discovered in webERP 4.15.
CriticalCVSS 9.8Proof of conceptEPSS 9%weberp · weberpJul 4, 2019
- CVE-2015-1001839Monitor
DBRisinajumi d2files D2filesController.php actionDownloadFile sql injection
CriticalCVSS 9.8No exploitEPSS 0%weberp · d2filesJan 6, 2023
- CVE-2025-4605239Monitor
An error-based SQL Injection (SQLi) vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL command and extract sensitive
CriticalCVSS 9.8No exploitEPSS 0%weberp · weberpMay 15, 2025
- CVE-2019-775536Monitor
In webERP 4.15, the Import Bank Transactions function fails to sanitize the content of imported MT940 bank statement files, resulting in the
HighCVSS 8.8No exploitEPSS 2%weberp · weberpMar 30, 2020
- CVE-2020-3708234Monitor
webERP 4.15.1 - Unauthenticated Backup File Access
HighCVSS 8.6No exploitEPSS 0%weberp · weberpFeb 3, 2026
- CVE-2018-1943528Monitor
An issue was discovered in the Sales component in webERP 4.15.
HighCVSS 7.2No exploitEPSS 1%weberp · weberpNov 22, 2018
- CVE-2018-1943628Monitor
An issue was discovered in the Manufacturing component in webERP 4.15.
HighCVSS 7.2No exploitEPSS 1%weberp · weberpNov 22, 2018
- CVE-2018-1943428Monitor
An issue was discovered on the "Bank Account Matching - Receipts" screen of the General Ledger component in webERP 4.15.
HighCVSS 7.2No exploitEPSS 1%weberp · weberpNov 22, 2018
- CVE-2020-2247426Monitor
In webERP 4.15, the ManualContents.php file allows users to specify the "Language" parameter, which can lead to local file inclusion.
MediumCVSS 6.5No exploitEPSS 1%weberp · weberpFeb 22, 2021
- CVE-2025-4605320Monitor
A SQL Injection vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL commands and extract sensitive data by injecting a
MediumCVSS 5.1No exploitEPSS 0%weberp · weberpMay 15, 2025
- CVE-2018-2042019Monitor
In webERP 4.15, Z_CreateCompanyTemplateFile.php has Incorrect Access Control, leading to the overwrite of an existing .sql file on the targe
MediumCVSS 4.9No exploitEPSS 0%weberp · weberpDec 23, 2018