Unpatched SQL Injection Vulnerability in Teknogis Informatics Closed Circuit Vehicle Tracking Software Leaves Systems at Risk

CVE-2024-7026

What is CVE-2024-7026?

The Closed Circuit Vehicle Tracking Software by Teknogis Informatics is susceptible to an SQL Injection vulnerability, allowing attackers to manipulate SQL commands. This vulnerability includes the potential for Blind SQL Injection, which can lead to unauthorized data access and database compromise. Notably, the vendor was contacted regarding this serious issue prior to public disclosure, but has yet to respond. Organizations utilizing the affected software versions are strongly encouraged to apply appropriate security measures and ensure prompt updates to safeguard their data.

References