E Osb
Monthly
SQL injection in Teracity Software Technologies' E-OSB application allows remote unauthenticated attackers to inject arbitrary SQL commands against the backend database, per TR-CERT advisory TR-26-0962. All versions before V02.26.07.08.01 are affected, and with a CVSS 9.8 (AV:N/PR:N) the flaw can be exploited over the network without authentication to fully read, modify, or destroy database contents. No public exploit identified at time of analysis, and the CVE is not listed in CISA KEV.
SQL injection in Teracity Software Technologies' E-OSB application allows remote unauthenticated attackers to inject arbitrary SQL commands against the backend database, per TR-CERT advisory TR-26-0962. All versions before V02.26.07.08.01 are affected, and with a CVSS 9.8 (AV:N/PR:N) the flaw can be exploited over the network without authentication to fully read, modify, or destroy database contents. No public exploit identified at time of analysis, and the CVE is not listed in CISA KEV.