A critical SQL injection vulnerability in the Armiya Information Technologies Access Control System exposes the application to unauthorized database access and potential remote command execution.

The software fails to properly neutralize special elements in SQL commands, allowing an unauthenticated attacker to inject malicious SQL queries. This flaw exists due to insufficient input validation within the system's core database interaction layer.

Successful exploitation of this vulnerability allows an attacker to bypass authentication, access sensitive data, modify database records, or potentially gain administrative control over the underlying system. Given the CVSS score of 9.8, this vulnerability poses a catastrophic risk to data confidentiality, integrity, and availability.

Immediate Action: Upgrade the Armiya Information Technologies Access Control System to Versiyon 2 or the latest available version provided by the vendor.

Proactive Monitoring: Review database query logs for suspicious patterns, such as unusual syntax, union-based queries, or unauthorized attempts to access system tables.

Compensating Controls: Deploy a Web Application Firewall (WAF) configured with strict SQL injection protection rules to inspect and block malicious traffic targeting the application endpoints.

Public Exploit Available: Unknown

This vulnerability is classified as critical due to its potential for full system compromise without requiring user interaction or authentication. Administrators must prioritize the application of the vendor-supplied update immediately to close this vector and protect the integrity of the backend database.