Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Biltay Technology Procost allows SQL Injection, Command Line Execution through SQL Injection.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.00706·Published 2023-10-12·Fixed in 1390CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Biltay Technology Kayisi allows SQL Injection, Command Line Execution through SQL Injection.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.00706·Published 2023-10-12·Fixed in 1286CWE-89