Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2024-13147: Merkur B2B Login Panel: Hackers can inject malicious SQL code

CVE-2024-13147 · published 1 year ago

Summary

A security issue in the Merkur B2B Login Panel allows hackers to inject malicious code into the system. This could allow unauthorized access to sensitive data. Update the software to the latest version to fix the issue.

Original advisory text

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Merkur Software B2B Login Panel allows SQL Injection. This issue affects B2B Login Panel: befo...

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Merkur Software B2B Login Panel allows SQL Injection.

This issue affects B2B Login Panel: before 15.01.2025.

References

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically
Gives an attacker full control

Severity

9.8 Critical

Exploitation

<1% chance of attack within 30 days

Type

CWE-89SQL Injection

Timeline

Published5 Mar 2025

Updated4 Nov 2026

First seen7 Mar 2026

Sources

CVE-2024-13147 · NVD

Track software like this

Free during beta