Description
The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Toptech Systems | TMS7 | 7.6.3 | 7.8 |
| Toptech Systems | TopHAT | 7.6.3 | 7.8 |
Advisories 1
- ICSA-26-272-02 Toptech TMS7 and TopHAT CISA ICS & IT advisories · Sep 29, 2026