← All advisories

Medium severity6.5NVD Advisory· Published Feb 22, 2021· Updated Jun 17, 2026

CVE-2020-22474

CVE-2020-22474

Description

In webERP 4.15, the ManualContents.php file allows users to specify the "Language" parameter, which can lead to local file inclusion.

Affected products

3

webERP/webERPdescription
Weberp/Weberpllm-fuzzy2 versions
4.15+ 1 more
- (no CPE)range: 4.15
- cpe:2.3:a:weberp:weberp:4.15:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

lyhinslab.org/index.php/2020/05/16/weberp-lfi/nvdExploitPatchThird Party Advisory

News mentions

0

No linked articles in our index yet.