An unauthenticated SQL injection vulnerability in Data Center Audit 2.6.2 allows remote attackers to execute arbitrary database queries and extract sensitive information.

This is an SQL injection flaw (CWE-89) located in the username parameter of the dca_login.php script. Unauthenticated attackers can submit crafted POST requests to inject malicious SQL commands, enabling unauthorized access to database content.

The ability for an unauthenticated attacker to inject arbitrary SQL commands poses a severe risk to data confidentiality. Successful exploitation allows for the unauthorized retrieval of database names, usernames, and version details, which can be leveraged to facilitate further system compromise or data exfiltration. Given the CVSS score of 8.2, this vulnerability is classified as High severity due to its potential for significant unauthorized information disclosure.

Immediate Action: As no official patch is currently available, administrators should restrict network access to the dca_login.php endpoint or disable the application until a secure version is released.

Proactive Monitoring: Review web server access logs for anomalous POST requests to dca_login.php, specifically identifying patterns containing SQL syntax or unusual character strings in the username field.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns targeting the login endpoint.

Public Exploit Available: Yes, a public proof-of-concept exists as documented in the Exploit-DB entry 45807.

Due to the public availability of exploit code and the lack of a verified vendor patch, this vulnerability presents a high risk to environment security. Organizations currently running Data Center Audit 2.6.2 must prioritize the implementation of compensating controls or network isolation to prevent exploitation. Immediate migration to an alternative solution is recommended if the vendor does not provide a security update.