Skip to content
OpenAdvisories

Vendor

Ribccs

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.2

    Build Smart ERP 21.0817 - 'eidValue' SQL Injection (Unauthenticated)

    Build Smart ERP 21.0817 contains an unauthenticated SQL injection vulnerability in the 'eidValue' parameter of the login validation endpoint. Attackers can inject stacked SQL queries using payloads like ';WAITFOR DELAY '0:0:3'-- to manipulate database queries…