PT-2025-6533 · Bss · Bss Software Mobuy Online Machinery Monitoring Panel

Yunus Ornek · Published 2025-02-14 · Updated 2025-10-14 · CVE-2024-13152

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BSS Software Mobuy Online Machinery Monitoring Panel versions prior to 2.0

Description The issue affects BSS Software Mobuy Online Machinery Monitoring Panel, allowing SQL Injection due to an Authorization Bypass Through User-Controlled SQL Primary Key vulnerability. This enables unauthorized access to sensitive data.

Recommendations For versions prior to 2.0, update to version 2.0 to resolve the issue. As a temporary workaround, consider restricting access to sensitive data and SQL endpoints to minimize the risk of exploitation.

Fix

SQL injection

Weakness Enumeration

CWE-89

CWE-566

Related Identifiers

CVE-2024-13152

Affected Products

Bss Software Mobuy Online Machinery Monitoring Panel

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2024-13152 · Security Note
• https://twitter.com/CVEnew/status/1890411288531964162 · Twitter Post
• https://twitter.com/CveFindCom/status/1890393398936297773 · Twitter Post
• https://twitter.com/kpoireault/status/1891494379715489880 · Twitter Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0033 · Note
• https://usom.gov.tr/bildirim/tr-25-0033 · Note
• https://t.me/cvenotify/111365 · Telegram Post
• https://t.me/cveNotify/138522 · Telegram Post
• https://twitter.com/0dayPublishing/status/1978078141236105399 · Twitter Post