CVE-2021-44874

🗓️ 21 Dec 2021 16:22:28Reported by mitreType

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Insecure design on report build via SQL query. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. The bi report module exposes direct SQL commands via POST data in order to select data for report generation. A malicious actor can use the bi report endpoint as a direct SQL prompt under the authenticated user

Reporter	Title	Published	Views	Family All 6
CNNVD	Dalmark Systems Systeam SQL注入漏洞	21 Dec 202100:00	–	cnnvd
Cvelist	CVE-2021-44874	21 Dec 202116:22	–	cvelist
EUVD	EUVD-2021-31676	3 Oct 202520:07	–	euvd
NVD	CVE-2021-44874	21 Dec 202117:15	–	nvd
OSV	CVE-2021-44874	21 Dec 202117:15	–	osv
Prion	Sql injection	21 Dec 202117:15	–	prion