Security Advisory
CVE-2018-19434
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
An issue was discovered on the "Bank Account Matching - Receipts" screen of the General Ledger component in webERP 4.15. BankMatching.php has Blind SQL injection via the AmtClear_ parameter.