Description
An error-based SQL Injection (SQLi) vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL command and extract sensitive data by injecting a crafted payload into the DEL form field in a POST request to /StockCounts.php
Critical · 9.8
CVE-2025-46052
EUVD-2025-15161GHSA-hm4p-7q9f-fx6q
An error-based SQL Injection (SQLi) vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL command and extract sensitive…
Published May 15, 2025 · Updated May 15, 2025 · Assigned by mitre