Hydrosystem Control System SQL Injection Vulnerability

A SQL injection vulnerability has been identified in Hydrosystem Control System, affecting all versions prior to 9.8.5. This vulnerability allows authenticated attackers to inject arbitrary SQL commands into most scripts and input parameters. The lack of protective measures could lead to full control over the database.

Impact

Exploitation of this vulnerability could allow an authenticated attacker to execute arbitrary SQL commands, potentially leading to unauthorized data access or manipulation, and in some cases, executing commands on the server.

Remediation

Users can upgrade to Hydrosystem Control System version 9.8.5 or later to address this vulnerability.