CVE-2023-35068 SQLi in BMAs Personnel Tracking System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BMA Personnel Tracking System allows SQL Injection. This issue affects Personnel Tracking System: before 20230904...

CVE-2023-35068

CVE-2023-35068 affects BMA Personnel Tracking System up to version 20230904, with a SQL Injection due to improper neutralization of input. CVSS: 3.1, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (9.8 CRITICAL). Connected sources confirm the issue is a SQLi vulnerability in the BMA Personnel Tracking Syste...

CVE-2023-35068: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BMA Personnel Tracking System allows SQL Injection. This issue affects Personnel Tracking System: before 20230904...

BMA Personnel Tracking System SQL Injection Vulnerability

BMA Personnel Tracking System is a personnel tracking system from BMA Turkey. A SQL injection vulnerability exists in versions of BMA Personnel Tracking System prior to 20230904, which stems from vulnerability to SQL injection attacks...

PT-2023-25124 · Unknown · Bma Personnel Tracking System

Name of the Vulnerable Software and Affected Versions: BMA Personnel Tracking System versions before 20230904 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. The...

bma-haustechnik.de Cross Site Scripting vulnerability OBB-3618422

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-43747

baramundi Management Agent bMA in baramundi Management Suite bMS 2021 R1 and R2 and 2022 R1 allows remote code execution. This is fixed in security update S-2022-01, which contains fixed bMA setup files for these versions. This also is fixed in baramundi Management Suite 2022 R2...

bma.org.uk XSS vulnerability

Vulnerable URL: https://www.bma.org.uk/connecting-doctors/search?q=sss%27%22--!%3E%3CScript%20/K/%3EconfirmOPENBUGBOUNTY%3C/Script%20/K/%3EKNOXSS Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...