This vulnerability, identified as CVE-2025-10437, is an SQL Injection issue (CWE-89) in the Webpack Management System by Eksagate Electronic Engineering and Computer Industry Trade Inc. It arises from improper neutralization of special elements in SQL commands, enabling attackers to execute arbitrary SQL code. The vulnerability affects all versions up to 20251119. The CVSS 3.1 base score is 9.8, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. No patch or official remediation information is provided, and the product is not a cloud service.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the backend database. This can lead to full compromise of the database, including unauthorized data disclosure, data modification, and potential denial of service. The CVSS score of 9.8 indicates critical impact on confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, it is recommended to monitor the vendor's communications for updates. Until a fix is available, consider implementing web application firewalls or input validation controls to mitigate SQL injection risks if possible.