SQL Injection Vulnerability Allows Remote Attackers to Access and Modify Sensitive Data

CVE-2024-26262

What is CVE-2024-26262?

The EBM Technologies Uniweb/SoliPACS WebServer is susceptible to an SQL injection vulnerability due to inadequate restrictions on user input within its query functionality. This deficiency enables remote attackers who are authenticated as regular users to inject malicious SQL commands. Such capabilities allow attackers to read, modify, and delete sensitive database records, as well as execute arbitrary system commands. Furthermore, the potential to exploit the dbo privilege within the database raises concerns regarding privilege escalation, granting attackers enhanced administrative access over the system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References