CVE-2024-7735 is an SQL Injection vulnerability (CWE-89) in the Exnet Informatics Software Ferry Reservation System versions prior to 240805-002. The vulnerability arises from improper neutralization of special elements in SQL commands, allowing an attacker to inject malicious SQL code. The CVSS 4.0 base score is 9.3, reflecting a critical severity with network attack vector, no required privileges or user interaction, and high impact on confidentiality, integrity, and availability. The vendor has not provided a patch or official remediation guidance yet. The product is not a cloud service, so remediation depends on vendor patch availability. No exploits are currently known in the wild.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to execute arbitrary SQL commands on the backend database of the Ferry Reservation System. This can lead to unauthorized data disclosure, data modification, or disruption of service. Given the high CVSS score and the nature of SQL Injection, the impact on confidentiality, integrity, and availability is high.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround is currently available, users should monitor Exnet Informatics Software advisories closely and plan to apply updates promptly once released. Until then, consider implementing application-layer input validation or web application firewall rules to detect and block SQL injection attempts if feasible.