2 matches found
CVE-2025-39518: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RedefiningTheWeb BMA Lite bma-lite-appointment-booking-and-scheduling allows SQL Injection.This issue affects BMA Lite: from n/a through = 1.4.2...
7.6CVSS8.6AI score0.00581EPSS
SaveExploits0References1
PT-2025-16632
Name of the Vulnerable Software and Affected Versions RedefiningTheWeb BMA Lite versions 1.4.2 and earlier Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...
7.6CVSS5.9AI score0.00581EPSS
SaveExploits0References4
20