CVE-2025-46053

Description

A SQL Injection vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL commands and extract sensitive data by injecting a crafted payload into the ReportID and ReplaceReportID parameters within a POST request to /reportwriter/admin/ReportCreator.php

Reserved 2025-04-22 | Published 2025-05-15 | Updated 2025-05-19 | Assigner mitre

References

www.weberp.org/

github.com/...CVEs/blob/main/WebERP/CVE-2025-46053 - SQLi.md

cve.org (CVE-2025-46053)

nvd.nist.gov (CVE-2025-46053)

Download JSON