Arma Store Armalife SQL Injection Vulnerability

A SQL injection vulnerability has been identified in the Arma Store Armalife product, developed by Arma Mağazacılık Ticaret ve Sanayi A.Ş. This vulnerability allows improper neutralization of special elements used in SQL commands, leading to the exposure of sensitive information. It affects Armalife versions through 20250916.

Impact

Exploitation of this vulnerability allows for SQL injection, which could be used to manipulate database queries and potentially access or modify sensitive information.

Remediation

The vendor has not yet addressed this vulnerability. Users are advised to consider using alternative software.