PT-2017-14970

Name of the Vulnerable Software and Affected Versions ZUUSE BEIMS ContractorWeb .NET version 5.18.0.0 Description The issue allows SQL injection via certain parameters. The vulnerable parameters include tradestatus, assetno, assignto, building, domain, jobtype, site, trade, woType, workorderno, o...