SQL Injection Vulnerability in LUNAD3v AreaLoad

CVE-2017-20195

What is CVE-2017-20195?

A critical SQL injection vulnerability exists in LUNAD3v AreaLoad, specifically affecting the request.php file. This vulnerability allows an attacker to manipulate the 'phone' argument, leading to unauthorized database queries and potentially exposing sensitive data. As this product does not adhere to versioning, details regarding affected and unaffected releases are scant. To mitigate this vulnerability, users must apply the provided patch (commit: 264813c546dba03989ac0fc365f2022bf65e3be2) immediately. It is essential for administrators and security teams to remain vigilant and apply updates to prevent exploitation.

References