CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

25 matches found

OSV•added 2017/12/18 4:29 p.m.•12 views

CVE-2017-17721

CWEBNET/WOSummary/List in ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows SQL injection via the tradestatus, assetno, assignto, building, domain, jobtype, site, trade, woType, workorderno, or workorderstatus parameter...

9.8CVSS5.8AI score0.03596EPSS

SaveExploits4References6

Prion•added 2017/12/18 4:29 p.m.•20 views

Sql injection

7.5CVSS9.8AI score0.03596EPSS

SaveExploits4References6Affected Software1

Cvelist•added 2017/12/18 4:00 p.m.•42 views

CVE-2017-17721

9.9AI score0.03596EPSS

SaveExploits4References6

CVE•added 2017/12/18 4:00 p.m.•83 views

CVE-2017-17721

CVE-2017-17721 describes an SQL injection vulnerability in ZUUSE BEIMS ContractorWeb .NET 5.18.0.0, specifically in WEBNET/WOSummary/List (CWEBNET/WOSummary/List). The underlying issue allows injection via multiple parameters: tradestatus, assetno, assignto, building, domain, jobtype, site, trade...

9.8CVSS8.2AI score0.03596EPSS

SaveExploits4References6Affected Software1

Rapid7 Vulnerability Database (full)•added 2017/12/18 12:00 a.m.•2 views

CVE-2017-17721: Improper Neutralization of Special Elements used in an SQL Command

9.8CVSS8.2AI score0.03596EPSS

SaveExploits4References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by