Critical severity9.8NVD Advisory· Published Jan 15, 2018· Updated Jun 17, 2026
CVE-2018-5328
CVE-2018-5328
Description
ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows access to various /UserManagement/ privileged modules without authenticating the user; an attacker can misuse these functionalities to perform unauthorized actions, as demonstrated by Edit User Details.
Affected products
1- Range: = 5.18.0.0
Patches
Vulnerability mechanics
References
1- becomepentester.blogspot.com/2018/01/ZUUSE-BEIMS-ContractorWeb-Privilege-Escalations-CVE-2018-5328.htmlnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.