high7.5
CVE-2014-4197
Multiple SQL injection vulnerabilities in Bank Soft Systems (BSS) RBS BS-Client 3.17.9 allow remote attackers to execute arbitrary SQL commands via the (1) CAR…
Impact
Multiple SQL injection vulnerabilities in Bank Soft Systems (BSS) RBS BS-Client 3.17.9 allow remote attackers to execute arbitrary SQL commands via the (1) CARDS or (2) XACTION parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bssys | Rbs Bs-Client | Version 3.17.9 |