CyberRota Analysis
AI-GeneratedThe vulnerability in the "supplier_no" parameter of the business allocation search feature allows for time-based blind SQL injection, potentially enabling attackers to extract sensitive data from the database. Organizations utilizing this feature should prioritize patching and remediation efforts due to the critical severity rating, as exploitation could lead to significant data breaches. Immediate attention is essential for any entity relying on this functionality to safeguard their data integrity and security.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The "supplier_no" parameter used in the business allocation search feature is vulnerable to time-based blind SQL injection.