A high-severity SQL injection vulnerability in iNET Webkit enables authenticated contributors to gain unauthorized database access and execute malicious commands.

The software fails to sanitize input, allowing authenticated users with contributor-level permissions to manipulate SQL queries and compromise the backend database.

The exploitation of this vulnerability could result in unauthorized data exfiltration or complete database manipulation. With a CVSS score of 8.5, the risk of total application compromise is substantial, potentially causing significant operational downtime and loss of user trust.

Immediate Action: Apply the vendor-provided patch immediately upon release to remediate the vulnerable input handling mechanism.

Proactive Monitoring: Monitor database query logs for unusual activity or syntax errors that characterize SQL injection attempts.

Compensating Controls: Utilize a Web Application Firewall (WAF) to block suspicious HTTP requests that contain common SQL injection signatures.

Public Exploit Available: false

Security teams should prioritize patching this vulnerability to prevent unauthorized access. In the absence of an immediate patch, restrict access to the affected web interface and enforce strict input validation policies.