MOSK Information Technologies CBS Platform SQL Injection Vulnerability

A SQL injection vulnerability has been identified in the CBS Platform developed by MOSK Information Technologies Ltd. This vulnerability allows for improper neutralization of special elements used in SQL commands, potentially leading to unauthorized database access or manipulation. The issue affects CBS Platform versions through 09062026.

Impact

Exploitation of this vulnerability allows cyber attackers to perform SQL injection attacks, potentially leading to unauthorized access to the database, data manipulation, or execution of administrative operations on the database.

Remediation

Due to the lack of vendor support for this product, users and system administrators are advised to consider using an alternative software.