NetSight
IP …
critical9.8

CVE-2023-35068

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BMA Personnel Tracking System allows SQL Injection.

Impact

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BMA Personnel Tracking System allows SQL Injection. This issue affects Personnel Tracking System: before 20230904.

Affected products

VendorProductAffected versions
BmaPersonnel Tracking System
before 20230904

Weakness classification

CWE-89

References