DATABASE Software Databank Accreditation SQL Injection Vulnerability

A vulnerability allowing authorization bypass through user-controlled SQL primary keys has been identified in DATABASE Software Training Consulting Ltd. Databank Accreditation Software, affecting versions through 19022026. This vulnerability allows SQL injection, which could be exploited by cyber attackers.

Impact

Exploitation of this vulnerability could lead to unauthorized SQL injection, allowing attackers to manipulate database queries and potentially access or modify sensitive data.

Remediation

The vendor has not yet addressed this vulnerability. Users are advised to switch to an alternative application.