This vulnerability (CVE-2024-13149) in Arma Store's Armalife product is an instance of CWE-89: Improper Neutralization of Special Elements used in an SQL Command (SQL Injection). It allows attackers to inject malicious SQL code due to insufficient input sanitization or validation. The vulnerability affects all versions of Armalife up to 20250916. No official patch or remediation has been announced by the vendor, and no known exploits are reported in the wild. The CVSS 3.1 base score is 9.8, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can lead to unauthorized disclosure of sensitive data, modification or deletion of data, and potential full system compromise. Given the critical CVSS score of 9.8, the impact is severe, affecting confidentiality, integrity, and availability of the affected system. No known exploits have been reported in the wild yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not announced a fix or mitigation, organizations should apply standard SQL injection mitigations such as input validation and use of parameterized queries where possible. Monitor vendor channels for updates and apply official patches once available.