CVE-2024-36840
SQL Injection vulnerability in Boelter Blue System Management v.1.3 allows a remote attacker to execute arbitrary code and obtain sensitive information via the id parameter to n…
Published: 2024-06-12 · CVSS: 9.1 · CVSS 3.1
SQL Injection vulnerability in Boelter Blue System Management v.1.3 allows a remote attacker to execute arbitrary code and obtain sensitive information via the id parameter to news_details.php and location_details.php; and the section parameter to services.php.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7