Skip to content
OpenAdvisories

Vendor

WebVella

1 known vulnerabilities.

Products

WebVella-ERP 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-111700

    WebVella ERP through 1.8.8 SQL Injection via EQL Query API

    WebVella ERP through 1.8.8 contains an sql injection vulnerability that allows any authenticated user to inject SQL through WHERE-clause text literals in the EQL query API. Attackers can send crafted single-quoted literals to POST /api/v3/en_US/eql, escaping …

    WebVella WebVella-ERP