CVE-2024-13152

critical · 10

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BSS Software Mobuy Online Machinery Monitoring Panel allows SQL Injection. This issue affects Mobuy Online Machinery Monitoring Panel: before 2.0.

CVSS

0.5%

EPSS (exploit prob.)

42nd

EPSS percentile

2025-02-14

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-89

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0033
https://www.usom.gov.tr/bildirim/tr-25-0033

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2024-13152