critical9.8
CVE-2021-37291
An SQL Injection vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 ivia the input_id POST parameter in index.php.
Impact
An SQL Injection vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 ivia the input_id POST parameter in index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kevinlab | 4st L-Bems | Version 1.0.0 |