Description
The "screenID" parameter in the electronic transaction queue viewer feature within the manual transactions section is susceptible to a time-based blind SQL injection vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Toptech Systems | TMS7 | 7.6.3 | 7.8 |
| Toptech Systems | TopHAT | 7.6.3 | 7.8 |
Advisories 1
- ICSA-26-272-02 Toptech TMS7 and TopHAT CISA ICS & IT advisories · Sep 29, 2026