CVE-2020-22474

Medium

In webERP 4.15, the ManualContents.php file allows users to specify the "Language" parameter, which can lead to local file inclusion.

mitre·CWE-829·Published 2021-02-22

CVSS

6.5

EPSS

0.01

KEV

Exploits

cve.orgen

133 chars

In webERP 4.15, the ManualContents.php file allows users to specify the "Language" parameter, which can lead to local file inclusion.

NVDen

133 chars

In webERP 4.15, the ManualContents.php file allows users to specify the "Language" parameter, which can lead to local file inclusion.

En webERP versión 4.15, el archivo ManualContents.php permite a usuarios especificar el parámetro "Language", que puede conllevar a una inclusión del archivo local

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.0	8.0	2.9	AV:N/AC:L/Au:S/C:P/I:N/A:N
3.1	Primary	NVD	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N