CVE-2017-6550

Multiple SQL injection vulnerabilities in Kinsey Infor-Lawson (formerly ESBUS) allow remote attackers to execute arbitrary SQL commands via the (1) TABLE parameter to esbus/servlet/GetSQLData or (2) QUERY parameter to KK_LS9ReportingPortal/GetData.

• CWE-89

• http://packetstormsecurity.com/files/141575/Kinseys-Infor-Lawson-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2017/Mar/31Exploit, Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/96821Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/41577/Exploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/141575/Kinseys-Infor-Lawson-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2017/Mar/31Exploit, Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/96821Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/41577/Exploit, Third Party Advisory, VDB Entry

Published

Mar 20, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6542The ssh_agent_channel_data function in PuTTY before 0.68 all…
• CVE-2017-6543Tenable Nessus before 6.10.2 (as used alone or in Tenable Ap…
• CVE-2017-6544Gargaj/wuhu through 2017-03-08 is vulnerable to a reflected …
• CVE-2017-6547Cross-site scripting (XSS) vulnerability in httpd on ASUS RT…
• CVE-2017-6548Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-…
• CVE-2017-6549Session hijack vulnerability in httpd on ASUS RT-N56U, RT-N6…
• CVE-2017-6551Pexip Infinity before 14.2 allows remote attackers to cause …
• CVE-2017-6552Livebox 3 Sagemcom SG30_sip-fr-5.15.8.1 devices have an insu…
• CVE-2017-6553Buffer Overflow in Quest One Identity Privilege Manager for …
• CVE-2017-6554pmmasterd in Quest Privilege Manager before 6.0.0.061, when …
• CVE-2017-6555Cross-site scripting (XSS) vulnerability in /admin/moduleint…
• CVE-2017-6556Cross-site scripting (XSS) vulnerability in CMS Made Simple …