A UNION-based SQL injection flaw exists in the sInfo POST parameter sent to /login/ap_Login.aspx/start of the Integratec application. The vulnerability allows an unauthenticated attacker to inject arbitrary SQL, leading to enumeration of database tables, extraction of credentials, and other sensitive user data. In addition, the injected payload can cause errors and partial denial-of-service conditions. The capability to retrieve data also lays the groundwork for further attacks, such as privilege escalation or data exfiltration. The weakness is a classic SQL injection (CWE‑89).

The flaw affects all released versions of Integratec’s web application. There is no narrower version scope provided; therefore every deployed instance of the Integratec application remains vulnerable until a fix is applied. The vendor responsible is Integratec, whose product name is the Integratec application.

The CVSS score of 8.8 indicates a high severity vulnerability. No EPSS value is published, so the current exploitation probability cannot be quantified precisely, but the lack of mitigation indicates that the flaw can be triggered remotely over the network via a simple POST request. The vulnerability has not been listed in the CISA KEV catalog. Based on the description, the attack vector is likely a remote unauthenticated web request to the vulnerable endpoint, exploiting the unsanitized sInfo parameter to obtain database contents or induce error conditions.