Vulnerability Details CVE-2019-5893
Nelson Open Source ERP v6.3.1 allows SQL Injection via the db/utils/query/data.xml query parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.21
EPSS Ranking 95.4%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
Products affected by CVE-2019-5893
-
cpe:2.3:a:nelson-it:open_source_erp:6.3.1