CVE-2024-13152

Summary

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BSS Software Mobuy Online Machinery Monitoring Panel allows SQL Injection.

This issue affects Mobuy Online Machinery Monitoring Panel: before 2.0.

Affected Software

VendorProductVersion RangeStatus
BSS SoftwareMobuy Online Machinery Monitoring Panel0 < 2.0affected

Weaknesses

  • CWE-89: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: total

References