This vulnerability (CVE-2024-13152) affects Mobuy Online Machinery Monitoring Panel prior to version 2.0 and is classified as CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'). It allows unauthenticated remote attackers to execute arbitrary SQL commands by injecting malicious input into the application's SQL queries. The CVSS 3.1 base score is 10.0, reflecting the highest severity with network attack vector, no required privileges or user interaction, and complete impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can lead to full compromise of the affected system, including unauthorized data disclosure, data manipulation, and potential denial of service. The critical CVSS score indicates that the vulnerability can be exploited remotely without authentication, posing a severe risk to affected deployments.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing application-level input validation and SQL query parameterization as temporary mitigations. Monitor vendor channels for updates and apply patches promptly once released.