What’s Vulnerable › Vulnerabilities

CVE-2021-47777: Build Smart ERP 21.0817 - 'eidValue' SQL Injection (Unauthenticated)

• Severity: high (CVSS 8.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-01-15 · updated 2026-06-17
• Weakness: CWE-89

Description

Build Smart ERP 21.0817 contains an unauthenticated SQL injection vulnerability in the 'eidValue' parameter of the login validation endpoint. Attackers can inject stacked SQL queries using payloads like ';WAITFOR DELAY '0:0:3'-- to manipulate database queries and potentially extract or modify database information.

Affected products

• Ribccs Build Smart ERP: 21.0817

References

• https://ribccs.com/solutions/solution-buildsmart
• https://www.exploit-db.com/exploits/50445

Get alerted when CVE-2021-47777 or the next vulnerability affects your stack