CVE-2018-5328

PoC —

CVSS 3.0

9.8 critical

EPSS

1%p68

Published

Jan 15, 2018 (Jan 15, 2018)

Modified

Jun 17, 2026

Description

ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows access to various /UserManagement/ privileged modules without authenticating the user; an attacker can misuse these functionalities to perform unauthorized actions, as demonstrated by Edit User Details.

Vendors: beims
Products: contractorweb.net
Weakness: CWE-287
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.