CVE-2025-46053

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-46053
A SQL Injection vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL commands and extract sensitive data by injecting a crafted payload into the ReportID and ReplaceReportID parameters within a POST request to /reportwriter/admin/ReportCreator.php
CVSS

No CVSS.

References
Link Resource
https://github.com/johnchd/CVEs/blob/main/WebERP/CVE-2025-46053%20-%20SQLi.md Exploit Third Party Advisory
https://www.weberp.org/ Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:weberp:weberp:4.15.2:*:*:*:*:*:*:*
History

12 Jun 2025, 13:12

Type Values Removed Values Added
First Time Weberp
Weberp weberp
CPE cpe:2.3:a:weberp:weberp:4.15.2:*:*:*:*:*:*:*
References () https://www.weberp.org/ - () https://www.weberp.org/ - Product
References () https://github.com/johnchd/CVEs/blob/main/WebERP/CVE-2025-46053%20-%20SQLi.md - () https://github.com/johnchd/CVEs/blob/main/WebERP/CVE-2025-46053%20-%20SQLi.md - Exploit, Third Party Advisory

15 May 2025, 15:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-15 15:16

Updated : 2025-06-12 13:12

NVD link : CVE-2025-46053

Mitre link : CVE-2025-46053

JSON object : View

Products Affected

weberp

  • weberp
CWE

No CWE.