CVE-2023-35068

Critical

Published: 05/09/2023(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The BMA Personnel Tracking System has an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands. This issue affects versions before 20230904.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to database information, posing a serious threat to information security within the organization.

Recommendation

It is recommended to update the BMA Personnel Tracking System to a version after 20230904 to mitigate this vulnerability.

Original NVD description (English source)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BMA Personnel Tracking System allows SQL Injection. This issue affects Personnel Tracking System: before 20230904.