Security Advisory
CVE-2018-19436
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
An issue was discovered in the Manufacturing component in webERP 4.15. CollectiveWorkOrderCost.php has Blind SQL Injection via the SearchParts parameter.