CVE-2018-20420

Name of the Vulnerable Software and Affected Versions webERP version 4.15

Description The issue is related to Incorrect Access Control in the Z CreateCompanyTemplateFile.php file, allowing the overwrite of an existing .sql file on the target web site. This can be achieved by creating a template and then using ../ directory traversal in the TemplateName parameter.

Recommendations For webERP version 4.15, consider restricting access to the Z CreateCompanyTemplateFile.php file and limiting the use of the TemplateName parameter to prevent directory traversal attacks. As a temporary workaround, avoid using the TemplateName parameter with ../ directory traversal until a patch is available.