TI-2024-18829 CVE-2024-28298 · GHSA-wpjv-3phj-f64x
SQL injection vulnerability in BM SOFT BMPlanning 1.0.0.1 allows authenticated users to…
Priority HIGH 73
SQL injection vulnerability in BM SOFT BMPlanning 1.0.0.1 allows authenticated users to execute arbitrary SQL commands via the SEC_IDF, LIE_IDF, PLANF_IDF, CLI_IDF, DOS_IDF, and possibly other parameters to /BMServerR.dl…