Uniong WebITR SQL Injection Vulnerability
Vulnerability
A SQL injection vulnerability has been identified in Uniong's WebITR application, specifically in versions through 2_1_0_33. This vulnerability allows authenticated remote attackers to inject arbitrary SQL commands, potentially leading to unauthorized access to database contents.
Impact
Exploitation of this vulnerability allows for SQL injection, enabling attackers to manipulate database queries and access or modify database information.
Remediation
Users are advised to update WebITR to version 2_1_0_34 or later.
Added: Nov 28, 2025, 8:18 AM
Updated: Nov 28, 2025, 8:18 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
5.2remediation
7.7relevance
1.2threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.