EIP-2026-113273

This exploit demonstrates a SQL injection vulnerability in webERP 4.11.3 via the 'SortBy' parameter in the SalesInquiry.php page. The payload injects a single quote to break the SQL query, potentially allowing an attacker to manipulate the query or extract sensitive data.