Critical severity9.8NVD Advisory· Published Mar 20, 2017· Updated Jun 17, 2026
CVE-2017-6550
CVE-2017-6550
Description
Multiple SQL injection vulnerabilities in Kinsey Infor-Lawson (formerly ESBUS) allow remote attackers to execute arbitrary SQL commands via the (1) TABLE parameter to esbus/servlet/GetSQLData or (2) QUERY parameter to KK_LS9ReportingPortal/GetData.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- cpe:2.3:a:kinsey:infor-lawson:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
4- packetstormsecurity.com/files/141575/Kinseys-Infor-Lawson-SQL-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2017/Mar/31nvdExploitMailing ListThird Party Advisory
- www.securityfocus.com/bid/96821nvdExploitThird Party AdvisoryVDB Entry
- www.exploit-db.com/exploits/41577/nvdExploitThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.