SQL Injection Vulnerability in Sunnet's eHDR CTMS Allows Remote Attackers to Access Database Contents

CVE-2024-10440

What is CVE-2024-10440?

The eHDR CTMS developed by Sunnet has a significant SQL Injection vulnerability that poses a serious risk to its users. This flaw enables unauthenticated remote attackers to inject arbitrary SQL commands into the database, which can lead to unauthorized reading, modification, or even deletion of sensitive data. As organizations increasingly rely on software for data management, the presence of such vulnerabilities underscores the critical need for proper security measures and timely updates to safeguard against potential exploitation.

References