CVE Catalog
CVE-2017-17721
CriticalSummary
CWEBNET/WOSummary/List in ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows SQL injection via the tradestatus, assetno, assignto, building, domain, jobtype, site, trade, woType, workorderno, or workorderstatus parameter.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to the database, threatening the confidentiality and integrity of the organization's data.
Recommendation
It is recommended to validate and sanitize input data and to update to the latest version of the software to minimize the risk of attack.
Original NVD description (English source)
CWEBNET/WOSummary/List in ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows SQL injection via the tradestatus, assetno, assignto, building, domain, jobtype, site, trade, woType, workorderno, or workorderstatus parameter.