Sql injection

2014-08-2214:55:00

PRIOn knowledge base

www.prio-n.com

9.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.2%

JSON

Multiple SQL injection vulnerabilities in Bank Soft Systems (BSS) RBS BS-Client 3.17.9 allow remote attackers to execute arbitrary SQL commands via the (1) CARDS or (2) XACTION parameter.

CPENameOperatorVersion
rbs_bs-clienteq3.17.9

CPE	Name	Operator	Version
	rbs_bs-client	eq	3.17.9

References

secunia.com/advisories/59319

www3.trustwave.com/spiderlabs/advisories/TWSL2014-009.txt