CVE-2021-47777 - Build Smart ERP 21.0817 - 'eidValue' SQL Injection (Unauthenticated) - 2025 Update

CVE ID : CVE-2021-47777 Published : Jan. 15, 2026, 3:52 p.m. | 12 minutes ago Description : Build Smart ERP 21.0817 contains an unauthenticated SQL injection vulnerability in the 'eidValue' parameter of the login validation endpoint. Attackers can inject stacked SQL queries using payloads like ';WAITFOR DELAY '0:0:3'-- to manipulate database queries and potentially extract or modify database information. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor