Read the docs

Biltay Technology

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Biltay Technology records in CISA KEV

No Biltay Technology vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Procost · all components

TI-2023-04646 CVE-2023-5046 · GHSA-grwg-vc68-grgp

SQLi in Biltay's Procost

Priority MEDIUM 43

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Biltay Technology Procost allows SQL Injection, Command Line Execution through SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00706 Published 2023-10-12 Fixed in 1390 CWE-89
Open these records in search →