Volerion logoVolerion
Volerion logoVolerion

Comerzzia Backoffice SQL Injection Vulnerability

Vulnerability

A SQL injection vulnerability has been identified in Comerzzia Backoffice: Sales Orchestrator version 3.0.15. This vulnerability allows attackers to retrieve, create, update, and delete databases through the 'uidActivity', 'codCompany', and 'uidInstance' parameters of the '/comerzzia/login' endpoint.

Impact

Exploitation of this vulnerability allows for unauthorized database manipulation, including retrieval, creation, updating, and deletion of database records.

Remediation

The vulnerability has been fixed in Comerzzia version 3.1.0, released on May 31, 2016.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
5.0
exploitability
7.4
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.