CVE-2021-47777: Ribccs Build Smart ERP

High severity, CVSS 8.2. EPSS: 0.3% chance of exploitation in the next 30 days.

Build Smart ERP 21.0817 contains an unauthenticated SQL injection vulnerability in the 'eidValue' parameter of the login validation endpoint. Attackers can inject stacked SQL queries using payloads like ';WAITFOR DELAY '0:0:3'-- to manipulate database queries and potentially extract or modify database information.

Affected products

• Ribccs Build Smart ERP: version 21.0817 only

Published 2026-01-15. Last modified 2026-06-17.