Sql injection

Multiple SQL injection vulnerabilities in Bank Soft Systems BSS RBS BS-Client 3.17.9 allow remote attackers to execute arbitrary SQL commands via the 1 CARDS or 2 XACTION parameter...