{"id":"CVE-2024-13152","aliases":["EUVD-2024-51379","GHSA-892g-4h6m-36mf"],"status":"published","title":"SQLi in BSS Software's Mobuy Online Machinery Monitoring Panel","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BSS Software Mobuy Online Machinery Monitoring Panel allows SQL Injection.\n\nThis issue affects Mobuy Online Machinery Monitoring Panel: before 2.0.","severity":{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00504,"percentile":0.43371,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-566","CWE-89"],"published":"2025-02-14T13:01:44Z","modified":"2026-06-17T07:01:19Z","products":[{"vendor":"bss software","product":"mobuy online machinery monitoring panel"}],"references":[{"url":"https://www.usom.gov.tr/bildirim/tr-25-0033","tags":["government-resource","broken-link"]},{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0033","tags":["government-resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-13152"},{"url":"https://github.com/advisories/GHSA-892g-4h6m-36mf"}],"sources":{"cve":[{"id":"CVE-2024-13152","title":"SQLi in BSS Software's Mobuy Online Machinery Monitoring Panel","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BSS Software Mobuy Online Machinery Monitoring Panel allows SQL Injection.\n\nThis issue affects Mobuy Online Machinery Monitoring Panel: before 2.0.","status":"published","published":"2025-02-14T13:01:44.625Z","modified":"2026-06-01T12:13:43.842Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:34:13.321108Z"}],"euvd":[{"id":"EUVD-2024-51379","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BSS Software Mobuy Online Machinery Monitoring Panel allows SQL Injection.\n\nThis issue affects Mobuy Online Machinery Monitoring Panel: before 2.0.","status":"published","published":"2025-02-14T13:01:44Z","modified":"2026-06-01T12:13:43Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T18:20:59.105484Z"}],"ghsa":[{"id":"GHSA-892g-4h6m-36mf","title":"Authorization Bypass Through User-Controlled SQL Primary Key vulnerability in BSS Software Mobuy...","description":"Authorization Bypass Through User-Controlled SQL Primary Key vulnerability in BSS Software Mobuy Online Machinery Monitoring Panel allows SQL Injection.This issue affects Mobuy Online Machinery Monitoring Panel: before 2.0.","status":"published","published":"2025-02-14T15:31:02Z","modified":"2026-06-01T15:31:37Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-89","CWE-566"],"updated_at":"2026-11-02T15:08:26.890955Z"}],"nvd":[{"id":"CVE-2024-13152","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BSS Software Mobuy Online Machinery Monitoring Panel allows SQL Injection.\n\nThis issue affects Mobuy Online Machinery Monitoring Panel: before 2.0.","status":"published","published":"2025-02-14T13:15:42.17Z","modified":"2026-06-17T07:01:19.697Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:10:44.508862Z"}]}}