Sunnet CTMS SQL Injection Vulnerability

A SQL injection vulnerability has been identified in all versions of the CTMS application developed by Sunnet. This vulnerability allows authenticated remote attackers to inject arbitrary SQL commands, which could be used to read, modify, or delete database contents.

Impact

Exploitation of this vulnerability could lead to unauthorized access to database information, allowing attackers to manipulate or delete data at will.

Remediation

The vendor should have issued a patch. If not yet received, please reach out to the vendor directly.