Salzer Technologies Maitra Mail Tracking System 1.7.2 contains a critical SQL injection vulnerability that allows authenticated attackers to execute arbitrary queries and exfiltrate the application database.

The application is susceptible to SQL injection through the mailid parameter in the outmail and inmail modules, which can be exploited by an authenticated user to perform unauthorized database operations. Furthermore, the application fails to restrict access to its SQLite database file, permitting direct download of sensitive mail tracking information and user credentials.

The ability to perform SQL injection and access the underlying database presents a high risk of data breach and account compromise. With a CVSS score of 7.1, this vulnerability allows an attacker to bypass standard application logic to obtain private communication records and credentials, potentially leading to lateral movement or total system takeover.

Immediate Action: As no official patch is available for this legacy version, administrators should immediately restrict access to the application directory and move the database file outside of the web server document root.

Proactive Monitoring: Monitor server access logs for anomalous GET requests targeting the application directory or suspicious SQL syntax patterns within URL parameters.

Compensating Controls: Implement a Web Application Firewall (WAF) to filter and block malicious SQL injection payloads targeting the mailid parameter.

Public Exploit Available: Yes, a functional proof-of-concept exploit is available via ExploitDB (EDB-ID 45841).

Given the severity of the data exposure and the availability of a public exploit, immediate action is required to secure the environment. Because no vendor patch exists for this version, organizations should prioritize migrating away from this software or isolating the instance within a strictly controlled network segment to prevent unauthorized access.