6 matches found
The vulnerability of the corporate web application for interaction between BEIMS Contractor Web contractors is related to insufficient validation of input data. This allows a malicious actor to execute arbitrary SQL commands.
The vulnerability of the corporate web application for interaction between contractors in BEIMS Contractor Web involves insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...
CVE-2025-10460
A SQL Injection vulnerability on an endpoint in BEIMS Contractor Web, a legacy product that is no longer maintained or patched by the vendor, allows an unauthorised user to retrieve sensitive database contents via unsanitized parameter input. This vulnerability occurs due to improper input...
CVE-2025-10460
A SQL Injection vulnerability on an endpoint in BEIMS Contractor Web, a legacy product that is no longer maintained or patched by the vendor, allows an unauthorised user to retrieve sensitive database contents via unsanitized parameter input. This vulnerability occurs due to improper input...
EUVD-2025-197751
A SQL Injection vulnerability on an endpoint in BEIMS Contractor Web, a legacy product that is no longer maintained or patched by the vendor, allows an unauthorised user to retrieve sensitive database contents via unsanitized parameter input. This vulnerability occurs due to improper input...
CVE-2025-10460
Summary: CVE-2025-10460 is a SQL Injection vulnerability in FMI/BEIMS Contractor Web. Affected component: the /BEIMSWeb/contractor.asp endpoint on BEIMS Contractor Web (version 5.7.139 is confirmed vulnerable). Root cause: improper input validation leading to unsanitized parameter input that can ...
CVE-2025-10460: Improper Input Validation
A SQL Injection vulnerability on an endpoint in BEIMS Contractor Web, a legacy product that is no longer maintained or patched by the vendor, allows an unauthorised user to retrieve sensitive database contents via unsanitized parameter input. This vulnerability occurs due to improper input...