An authenticated SQL injection vulnerability in eBrigade ERP 4.5 allows attackers to extract sensitive database information, posing a significant risk to data confidentiality.

The application is vulnerable to SQL injection (CWE-89) because it fails to properly sanitize user input in the id parameter of the pdf.php script. An authenticated attacker can leverage this flaw to send malicious GET requests, enabling the extraction of database contents, including table names and schema structures.

This vulnerability carries a CVSS score of 7.1, indicating a high severity risk. Successful exploitation allows unauthorized access to the backend database, which may lead to the exposure of sensitive organizational data, credential theft, or further compromise of the application environment. The potential for schema discovery significantly lowers the barrier for more advanced attacks against the underlying infrastructure.

Immediate Action: There is no official patch provided by the vendor; users are advised to restrict access to the affected instance or migrate to a more secure alternative.

Proactive Monitoring: Security teams should monitor web server access logs for anomalous GET requests to pdf.php that contain SQL syntax patterns or unexpected characters in the id parameter.

Compensating Controls: Deploy a Web Application Firewall (WAF) with custom rules designed to inspect and block SQL injection attempts targeting the id parameter in the application URL path.

Public Exploit Available: Yes, a published proof-of-concept exists; it is attributed to the technical write-up on Exploit-DB (EDB-ID 46117).

Given the high severity of this SQL injection flaw and the availability of public exploit code, immediate action is required to secure the environment. Organizations currently running eBrigade ERP 4.5 must implement stringent WAF filtering or network-level access controls to prevent unauthorized interaction with the vulnerable endpoint until a permanent resolution is available.