CVE-2017-17721: Improper Neutralization of Special Elements used in an SQL Command

CWEBNET/WOSummary/List in ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows SQL injection via the tradestatus, assetno, assignto, building, domain, jobtype, site, trade, woType, workorderno, or workorderstatus parameter...

PT-2017-14970

Name of the Vulnerable Software and Affected Versions ZUUSE BEIMS ContractorWeb .NET version 5.18.0.0 Description The issue allows SQL injection via certain parameters. The vulnerable parameters include tradestatus, assetno, assignto, building, domain, jobtype, site, trade, woType, workorderno, o...