This vulnerability (CVE-2024-32137) in Solwin User Activity Log Pro versions up to 2.3.4 is categorized under CWE-89 (Improper Neutralization of Special Elements used in an SQL Command, i.e., SQL Injection). It allows an attacker with network access and low privileges to inject SQL commands due to insufficient input sanitization. The CVSS 3.1 score is 8.5, reflecting high impact on confidentiality, limited impact on availability, and no impact on integrity. The vulnerability is publicly disclosed but lacks an official fix or patch at this time.

Successful exploitation could lead to unauthorized disclosure of sensitive information (high confidentiality impact) and a limited denial of service (low availability impact). Integrity is not impacted. The attacker requires low privileges and no user interaction, increasing the risk. However, no known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider restricting network access to the affected application and monitor for suspicious activity related to SQL injection attempts. Avoid exposing the application to untrusted networks if possible.