Sunbird Power IQ SQL Injection Vulnerability in API
Vulnerability
A SQL injection vulnerability has been identified in the Sunbird Power IQ API version 9.2.0. This vulnerability arises from an outdated API endpoint that improperly handled input arrays, allowing attackers to manipulate SQL queries. The issue has been resolved in Power IQ version 9.2.1, which includes an updated API that ensures safe input handling.
Impact
Exploitation of this vulnerability allows for error-based SQL injection, where an attacker can manipulate SQL queries and potentially access or modify database information.
Remediation
Users can upgrade to Sunbird Power IQ version 9.2.1 to address this vulnerability.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.