by Kastro
Paper/Archive/CVE-2024-13152

CVE-2024-13152

BSS Software Mobuy Online Machinery Monitoring Panel — SQLi in BSS Software's Mobuy Online Machinery Monitoring Panel

EPSS 0.5%CVSS 10.0
critical.is priorityof 100
39
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 43.1.431 × 208.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BSS Software Mobuy Online Machinery Monitoring Panel allows SQL Injection. This issue affects Mobuy Online Machinery Monitoring Panel: before 2.0.

Affected

ProductAffectedFixed inSource
Mobuy Online Machinery Monitoring Panel< 2.02.0CNA

Scores by source

TR-CERT (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refusom.gov.tr/bildirim/tr-25-0033refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0033