CoreCVE
Back

CRITICAL

download.php in inoERP 4.15 allows SQL injection through insecure deserialization

Published Sep 26, 2019

Description

download.php in inoERP 4.15 allows SQL injection through insecure deserialization.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-502

Deserialization of Untrusted Data

CWE-89

SQL Injection

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner mitre
Published Sep 26, 2019
Updated Aug 5, 2024
Reserved Sep 25, 2019
Link CVE-2019-16894

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2019-16894

Red Hat

No data

ENISA EUVD

Assigner mitre
Published Sep 26, 2019
Updated Aug 5, 2024
Link EUVD-2019-7392

GitHub

No data