CyberRota Analysis
AI-GeneratedThe "screenID" parameter in the electronic transaction queue viewer is vulnerable to a time-based blind SQL injection, allowing attackers to execute unauthorized SQL queries and potentially extract sensitive data from the database. This critical vulnerability poses a significant risk to any organization utilizing this feature, particularly those handling sensitive financial transactions. Organizations should prioritize remediation efforts to mitigate the risk of data breaches and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The "screenID" parameter in the electronic transaction queue viewer feature within the manual transactions section is susceptible to a time-based blind SQL injection vulnerability.