← CVE Intelligence

CVE-2021-47777

Build Smart ERP 21.0817 - 'eidValue' SQL Injection (Unauthenticated) PUBLISHED

Description (CNA)

Build Smart ERP 21.0817 contains an unauthenticated SQL injection vulnerability in the 'eidValue' parameter of the login validation endpoint. Attackers can inject stacked SQL queries using payloads like ';WAITFOR DELAY '0:0:3'-- to manipulate database queries and potentially extract or modify database information.

Affected (CNA)

Vendor / productVersions
Ribccs / Build Smart ERPaffected 21.0817

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.