Security Advisory

CVE-2019-16894

9.8
CRITICAL

Vulnerability Description

download.php in inoERP 4.15 allows SQL injection through insecure deserialization.
Published Date September 26, 2019
Official Source NIST NVD Advisory