A critical SQL injection vulnerability in AMSS++ version 4.31 allows unauthenticated remote attackers to compromise backend database integrity and confidentiality.

This vulnerability is a SQL injection flaw located within the mail module of the application. An unauthenticated attacker can supply malicious SQL queries via the 'id' parameter in the maildetail.php script to execute unauthorized database commands.

The ability for an unauthenticated attacker to inject arbitrary SQL queries poses a severe risk to the confidentiality and integrity of the entire database. Successful exploitation could lead to unauthorized data exfiltration, modification of user records, or potential administrative account takeover, resulting in significant operational disruption and reputational damage. With a CVSS score of 8.2, this vulnerability represents a high-severity threat that requires immediate attention.

Immediate Action: As there is currently no official patch available, administrators should restrict access to the vulnerable /modules/mail/main/maildetail.php endpoint at the network or web server level.

Proactive Monitoring: Security teams should review web server access logs for anomalous requests containing SQL syntax or unusual characters directed at the maildetail.php script.

Compensating Controls: Implement a Web Application Firewall (WAF) with rules configured to detect and block SQL injection patterns to provide a virtual patch until the vendor releases a formal fix.

Public Exploit Available: Yes — a published proof-of-concept exists in the Exploit Database (EDB-ID: 48109).

Given the high CVSS score and the public availability of a proof-of-concept, the risk of exploitation is elevated. Organizations currently running AMSS++ version 4.31 must prioritize isolating the affected module or implementing robust WAF filtering immediately. Continuous monitoring for indicators of compromise is essential until the vendor provides a permanent software update.