HAMASTAR Technology WIMP SQL Injection Vulnerability

A SQL injection vulnerability has been identified in the WIMP website co-construction management platform by HAMASTAR Technology, affecting versions through 5.3.1.34642. This vulnerability allows unauthenticated remote attackers to inject arbitrary SQL commands, potentially leading to unauthorized reading, modification, or deletion of database contents.

Impact

Exploitation of this vulnerability allows for SQL injection, enabling attackers to manipulate the database in various ways, such as reading, modifying, or deleting data.

Remediation

Users are advised to update to WIMP version 5.3.1.34643 or later.