CVE-2014-4197

Multiple SQL injection vulnerabilities in Bank Soft Systems (BSS) RBS BS-Client 3.17.9 allow remote attackers to execute arbitrary SQL commands via the (1) CARDS or (2) XACTION parameter.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2014-08-22

Last modified

2024-08-06

Weaknesses

CWE-89

Affected products

• Rbs Bs-client (Bssys)

References

• http://secunia.com/advisories/59319
• https://www3.trustwave.com/spiderlabs/advisories/TWSL2014-009.txt