Eksagate Webpack Management System SQL Injection Vulnerability

A SQL injection vulnerability has been identified in the Webpack Management System developed by Eksagate Electronic Engineering and Computer Industry Trade Inc. This vulnerability allows for improper neutralization of special elements used in SQL commands, potentially leading to unauthorized database access or manipulation. The issue affects Webpack Management System versions through 20251119.

Impact

Exploitation of this vulnerability allows attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access, data manipulation, or in some cases, executing administrative operations on the database.

Remediation

USOM advises users to switch to an alternative software, as the manufacturer has discontinued support for this product.