The vulnerability CVE-2025-24664 affects enituretechnology's LTL Freight Quotes – Worldwide Express Edition (versions up to 5.0.20) and is caused by improper neutralization of special elements in SQL commands, resulting in an SQL Injection flaw. This allows unauthenticated remote attackers to potentially access sensitive data, as indicated by the CVSS vector (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L). The issue is publicly known and published but lacks vendor patch or mitigation details.

Successful exploitation of this vulnerability could allow remote attackers to access sensitive information from the database without authentication, impacting confidentiality severely. The vulnerability does not directly affect data integrity or availability significantly but could lead to partial denial of service. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying any recommended temporary mitigations from the vendor or restrict access to the affected application to trusted users only.