Security Advisory
CVE-2018-19435
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
An issue was discovered in the Sales component in webERP 4.15. SalesInquiry.php has SQL Injection via the SortBy parameter.