CVE-2020-22474
6.5MEDIUMIn webERP 4.15, the ManualContents.php file allows users to specify the "Language" parameter, which can lead to local file inclusion.
Опубликовано: 2/22/2021Обновлено: 11/21/2024
Описание
In webERP 4.15, the ManualContents.php file allows users to specify the "Language" parameter, which can lead to local file inclusion.
ИИ-АнализНа базе ИИ
Затронутые продукты
weberpweberp
4.15
Ссылки
- https://lyhinslab.org/index.php/2020/05/16/weberp-lfi/ExploitPatchThird Party Advisory
- https://lyhinslab.org/index.php/2020/05/16/weberp-lfi/ExploitPatchThird Party Advisory