A critical SQL injection vulnerability in WebTareas 2.4 allows unauthenticated attackers to perform unauthorized database operations and extract sensitive information.

The application fails to properly sanitize user-supplied input within the webTareasSID cookie parameter. This vulnerability allows an unauthenticated attacker to inject malicious SQL commands, enabling error-based or time-based blind data extraction.

The ability for an unauthenticated user to interact directly with the backend database poses a severe threat to data confidentiality and integrity. Successful exploitation could lead to the total compromise of sensitive system data stored within the database, potentially facilitating further unauthorized access or total system failure. With a CVSS score of 8.2, this vulnerability is classified as High, reflecting the significant risk of data exfiltration and potential service disruption.

Immediate Action: As no official patch is currently identified, administrators should restrict network access to the WebTareas instance to trusted internal networks only. If the application is not business-critical, consider taking it offline until a vendor-supplied update is released.

Proactive Monitoring: Review web server and database logs for anomalous activity, specifically looking for SQL syntax errors, unusual characters in cookie headers, or high-frequency requests originating from single sources.

Compensating Controls: Implement a Web Application Firewall (WAF) with strict SQL injection protection rules to inspect incoming cookie headers and block malicious payloads targeting the webTareasSID parameter.

Public Exploit Available: Yes, a published proof-of-concept exists as detailed in the Exploit-DB entry 51087.

Given the availability of a functional public exploit and the lack of a vendor-provided patch, this vulnerability presents an immediate risk to the organization. Security teams should prioritize the implementation of compensating controls, such as WAF filtering, and limit exposure of the affected application to the public internet to prevent unauthorized data access.