Webvella Erp
Approved changes feed: RSS · Atom
cpe:2.3:a:webvella:webvella-erp:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Webvella (74bf5d91-344e-5528-a9c4-1c322a016507) |
|---|---|
| Product | Webvella Erp (ed48a763-71ab-5b72-b01b-4fff8502e24c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-111700 |
vulnerable | 2026-11-03 10:16:11.406375 |
WebVella ERP through 1.8.8 SQL Injection via EQL Query API
HIGH (7.1)
WebVella ERP through 1.8.8 contains an sql injection vulnerability that allows any authenticated user to inject SQL through WHERE-clause text literals in the EQL query API. Attackers can send crafted single-quoted literals to POST /api/v3/en_US/eql, escaping the unsanitized EqlBuilder SQL interpolation to read unauthorized entities, including user and role tables.
Published: 2026-10-16T17:39:53.721Z
Updated: 2026-10-19T13:40:04.709Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.