CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in HK Digital Agency LLC TAX SERVICE Electronic HDM virtual-hdm-for-taxservice-am allows SQL Injection.This issue affects TAX SERVICE Electronic HDM: from n/a through <= 1.2.2.
Explanation of Vulnerability in Simple Terms
TAX SERVICE Electronic HDM versions 1.2.2 and earlier contain a SQL injection vulnerability in the application's database query handling. An attacker can craft malicious input to execute arbitrary SQL commands, potentially reading, modifying, or deleting sensitive data. No authentication or user interaction is required to exploit this vulnerability.
What an attacker can do
Execute arbitrary SQL commands to read, modify, or delete database records without authentication.
Potential impact on your site
Complete compromise of the application database, including potential theft or destruction of all stored data.
Conditions required to exploit
Network access to the application; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
