Uniong WebITR SQL Injection Vulnerability
Vulnerability
A SQL injection vulnerability has been identified in Uniong's WebITR application, specifically in version 2_1_0_32 and earlier. This vulnerability allows unauthenticated remote attackers to inject arbitrary SQL commands, potentially leading to unauthorized access to database contents.
Impact
Exploitation of this vulnerability allows for unauthorized reading of database contents, which could lead to data leakage or manipulation.
Remediation
Users are advised to update to version 2_1_0_33 or later.
Added: Aug 22, 2025, 12:20 PM
Updated: Aug 22, 2025, 12:20 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
7.4remediation
7.7relevance
0.4threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.