CVE-2024-28298
- Reference to the description:
- Description:
- SQL injection vulnerability in BM SOFT BMPlanning 1.0.0.1 allows authenticated users to execute arbitrary SQL commands via the SEC_IDF, LIE_IDF, PLANF_IDF, CLI_IDF, DOS_IDF, and possibly other parameters to /BMServerR.dll/BMRest.
- Last updated date:
- 09/11/2024
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 09/11/2024