SQL Injection

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. SQL injection vulnerability in TrackItWeb/Grid/GetData in BMC Track-It! 11.3.0.355 allows remote authenticated users to execute arbitrary SQL commands via crafted POST data.CVE-2014-4873Bmc · 4.2% likely

   CWE-89

2. This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It! 20.21.02.109. Authentication is required to exploit this vu…CVE-2022-35864BMC · CVSS 5.3 · 1.6% likely

   CWE-89

3. Multiple SQL injection vulnerabilities in BMC Service Desk Express (SDE) 10.2.1.95 allow remote attackers to execute arbitrary SQL commands via the (1) ASPSESSIONIDASSRATTQ, (2) T…CVE-2013-4945Bmc · 1.1% likely

   CWE-89

4. A SQL injection vulnerability in BMC Control-M before 9.0.20.214 allows attackers to execute arbitrary SQL commands via the memname JSON field.CVE-2023-26550Bmc · CVSS 9.8 · 0.8% likely

   CWE-89

5. BMC Control-M through 9.0.20.200 allows SQL injection via the /RF-Server/report/deleteReport report-id parameter. This is fixed in 9.0.21 (and is also fixed by a patch for 9.0.20.…CVE-2023-39122Bmc · 0.7% likely

   CWE-89

6. An issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22. A SQL injection vulnerability in the MFT API's debug interface allows an authenticated attacker to inject malic…CVE-2026-23780Bmc · CVSS 8.8 · 0.4% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.