Description
An issue was discovered in the Sales component in webERP 4.15. SalesInquiry.php has SQL Injection via the SortBy parameter.
Remediation
References
Related Vulnerabilities
WordPress Plugin Media Library Categories 'termid' Parameter SQL Injection (1.0.6)
Oracle JRE CVE-2013-5824 Vulnerability (CVE-2013-5824)
MySQL CVE-2020-2930 Vulnerability (CVE-2020-2930)
WordPress Plugin Broken Link Manager Cross-Site Scripting (0.5.5)
Envoy Proxy Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2019-18836)