Logo Software Diva SQL Injection Vulnerability Allowing Authorization Bypass
Vulnerability
A SQL injection vulnerability has been identified in Logo Software Diva versions through 4.56.00.00. This vulnerability allows for authorization bypass by manipulating SQL primary keys, enabling attackers to execute blind SQL injection attacks.
Impact
Exploitation of this vulnerability allows for SQL injection, which could be used to manipulate database queries, potentially leading to unauthorized data access or modification.
Remediation
Users are advised to upgrade to version 4.56.00.00 or later.
Added: Sep 18, 2025, 12:22 PM
Updated: Sep 18, 2025, 5:57 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
7.4remediation
7.7relevance
0.5threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.