In webERP 4.15, the ManualContents.php file allows users to specify the “Language” parameter, which can lead to local file inclusion.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22474
Reference (s):
- https://lyhinslab.org/index.php/2020/05/16/weberp-lfi/