Sunnet eHDR CTMS SQL Injection Vulnerability
Vulnerability
A SQL injection vulnerability has been identified in Sunnet's eHDR CTMS, affecting versions through 10.13. This vulnerability allows remote attackers with normal privileges to inject arbitrary SQL commands, potentially leading to unauthorized access to database contents.
Impact
Exploitation of this vulnerability allows for SQL injection, enabling attackers to manipulate database queries and access or modify database information.
Remediation
Users are advised to contact the vendor for the patch.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
5.2remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.