aEnrich Technology a+HRD SQL Injection Vulnerability
Vulnerability
A SQL injection vulnerability has been identified in a+HRD by aEnrich Technology, affecting versions through 7.5. This vulnerability allows unauthenticated remote attackers to inject arbitrary SQL commands, potentially leading to unauthorized reading, modification, or deletion of database contents.
Impact
Exploitation of this vulnerability allows for arbitrary SQL injection, enabling attackers to manipulate database contents. This could include reading sensitive information, modifying data, or deleting database entries.
Remediation
Users are advised to upgrade to version 6.8 or later and install the latest patches. For assistance, contact aEnrich customer service.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.