Description
Catalis/Patriot Properties WebPro 5.0 allows a remote unauthenticated attacker to execute arbitrary SQL queries against the underlying MSSQL database, enabling exfiltration of sensitive property and taxpayer information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Catalis | WebPro | 5.0 | — |
Advisories 1
- VA-26-310-01 Catalis WebPro SQLi CISA ICS & IT advisories · Nov 13, 2026