A critical SQL injection vulnerability exists in multiple SOUND4 products, allowing unauthenticated attackers to bypass authentication and extract unauthorized database information.

This flaw is an SQL injection (CWE-89) located in the username POST parameter of the index.php script. It allows an unauthenticated attacker to inject arbitrary SQL commands, resulting in authentication bypass and potential data exfiltration.

The ability for an unauthenticated attacker to manipulate backend database queries poses a severe risk to confidentiality and integrity. Successful exploitation could lead to unauthorized access to administrative accounts, exposure of sensitive configuration data, or the compromise of protected user information. With a CVSS score of 8.2, this vulnerability represents a high-severity threat that could lead to full system compromise if the database is leveraged to gain further access.

Immediate Action: Contact SOUND4 Ltd. or the respective vendor support channels to obtain the latest security patches for the affected software versions, as no public patch version is currently specified.

Proactive Monitoring: Review web server access logs for suspicious POST requests to index.php containing SQL syntax characters, such as single quotes, semicolons, or comment indicators.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns in the username parameter.

Public Exploit Available: Yes, a published proof-of-concept exists and is attributed to the technical write-up provided by Packet Storm Security.

Given the availability of a published proof-of-concept, the risk of exploitation is elevated. Organizations utilizing the affected SOUND4 or Kantar Media products must prioritize identifying their current versions and engaging with the vendor for remediation. Until a patch is applied, ensure that the affected interfaces are not exposed to the public internet and utilize WAF protections to mitigate the risk of unauthorized database access.