Critical severity9.8NVD Advisory· Published May 15, 2025· Updated Jun 17, 2026
CVE-2025-46052
CVE-2025-46052
Description
An error-based SQL Injection (SQLi) vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL command and extract sensitive data by injecting a crafted payload into the DEL form field in a POST request to /StockCounts.php
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
2- github.com/johnchd/CVEs/blob/main/WebERP/CVE-2025-46052%20-%20SQLi.mdnvdExploitThird Party Advisory
- www.weberp.orgnvdProduct
News mentions
0No linked articles in our index yet.