Threat database

KANATA Limited's CMS ALAYA version 7.4.1.4 and earlier contains an SQL injection vulnerability that allows an attacker with administrative interface access to obtain or alter information stored in the database. The vulnerability is classified as medium severity with a CVSS score of 4.7. There is no confirmed patch or official remediation available at this time. Exploits in the wild are not known. Users should verify vendor advisories for updates and consider restricting administrative access to trusted personnel until a fix is available.