NewType Infortech NUP Pro SQL Injection Vulnerability
Vulnerability
A SQL injection vulnerability has been identified in NUP Pro developed by NewType Infortech, affecting versions through SP5.0. This vulnerability allows unauthenticated remote attackers to inject arbitrary SQL commands, enabling them to read, modify, and delete database contents.
Impact
Exploitation of this vulnerability could lead to unauthorized access to the database, allowing attackers to manipulate database contents by reading, modifying, or deleting data.
Remediation
Users are advised to update to version SP5.1 or later.
Added: Sep 12, 2025, 11:21 AM
Updated: Sep 12, 2025, 11:21 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
5.0exploitability
7.4remediation
7.7relevance
0.5threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.