| Package | Affected versions | Patched versions |
|---|---|---|
| beims contractorweb .net | = 5.18.0.0 |
CWEBNET/WOSummary/List in ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows SQL injection via the tradestatus, assetno, assignto, building, domain, jobtype, site, trade, woType, workorderno, or workorderstatus parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free