BEIMS ContractorWeb.NET 5.18.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:beims:contractorweb.net:5.18.0.0:*:*:*:*:*:*:*
part: a version: 5.18.0.0 update: *
| Vendor | Beims (84a7841d-f9f4-5d36-958d-d59ed909c433) |
|---|---|
| Product | Contractorweb.Net (5618a8f9-1f22-589a-94ac-0bbda65fcd2e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-5329 |
vulnerable | 2026-06-08 05:11:50.615444 |
Details available
ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 is vulnerable to Cross-Site Request Forgery (CSRF) on /CWEBNET/* authenticated pages. A successful CSRF attack can force the user to modify state: creating users, changing an email address, and so forth. If the victim is an administrative account, CSRF can compromise the entire web application.
Published: 2018-01-15T21:00:00.000Z
Updated: 2024-08-05T05:33:44.081Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5328 |
vulnerable | 2026-06-08 05:11:50.615039 |
Details available
ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows access to various /UserManagement/ privileged modules without authenticating the user; an attacker can misuse these functionalities to perform unauthorized actions, as demonstrated by Edit User Details.
Published: 2018-01-15T21:00:00.000Z
Updated: 2024-08-05T05:33:44.035Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.