{"id":"CVE-2024-13152","state":"PUBLISHED","title":"SQLi in BSS Software's Mobuy Online Machinery Monitoring Panel","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BSS Software Mobuy Online Machinery Monitoring Panel allows SQL Injection.\n\nThis issue affects Mobuy Online Machinery Monitoring Panel: before 2.0.","publishedAt":"2025-02-14T13:01:44.625Z","updatedAt":"2026-06-01T12:13:43.842Z","severity":{"score":10,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","source":"TR-CERT"},"assigner":"TR-CERT","products":["BSS Software Mobuy Online Machinery Monitoring Panel"],"affected":[{"vendor":"BSS Software","product":"Mobuy Online Machinery Monitoring Panel","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.0","versionType":"custom"}]}],"references":["https://www.usom.gov.tr/bildirim/tr-25-0033","https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0033"],"weaknesses":["CWE-89"],"ingestedAt":"2026-10-29T20:06:50.777Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/13xxx/CVE-2024-13152.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2024-13152","state":"PUBLISHED","datePublished":"2025-02-14T13:01:44.625Z","dateUpdated":"2026-06-01T12:13:43.842Z","assignerShortName":"TR-CERT","assignerOrgId":"ca940d4e-fea4-4aa2-9a58-591a58b1ce21","dateReserved":"2025-01-06T14:08:18.476Z"},"containers":{"cna":{"title":"SQLi in BSS Software's Mobuy Online Machinery Monitoring Panel","descriptions":[{"lang":"en","value":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BSS Software Mobuy Online Machinery Monitoring Panel allows SQL Injection.\n\nThis issue affects Mobuy Online Machinery Monitoring Panel: before 2.0."}],"affected":[{"vendor":"BSS Software","product":"Mobuy Online Machinery Monitoring Panel","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.0","versionType":"custom"}]}],"references":[{"url":"https://www.usom.gov.tr/bildirim/tr-25-0033","tags":["government-resource","broken-link"]},{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0033","tags":["government-resource"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseSeverity":"CRITICAL","baseScore":10,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-89","lang":"en","description":"CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","type":"CWE"}]}],"providerMetadata":{"shortName":"TR-CERT","orgId":"ca940d4e-fea4-4aa2-9a58-591a58b1ce21","dateUpdated":"2026-06-01T12:13:43.842Z"},"impacts":[{"capecId":"CAPEC-66","descriptions":[{"lang":"en","value":"CAPEC-66 SQL Injection"}]}],"credits":[{"lang":"en","value":"Yunus ORNEK","type":"finder"}],"source":{"defect":["TR-25-0033"],"advisory":"TR-25-0033","discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-02-14T13:22:13.386187Z","id":"CVE-2024-13152","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-02-14T13:28:46.098Z"}}]}}}