CVE-2021-47777

8.8 highEPSS 0.3%

High (8.8). EPSS 0.3% chance of exploitation in the next 30 days.

Build Smart ERP 21.0817 contains an unauthenticated SQL injection vulnerability in the 'eidValue' parameter of the login validation endpoint. Attackers can inject stacked SQL queries using payloads like ';WAITFOR DELAY '0:0:3'-- to manipulate database queries and potentially extract or modify database information.

Severity

CVSS 4.0

8.8 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

8.2 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2026-01-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://ribccs.com/solutions/solution-buildsmart
https://www.exploit-db.com/exploits/50445

Check your stack JSON