Beveiligingsadvies

CVE-2025-40677

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-09-18 11:46:31
Laatst bijgewerkt 2025-09-18 13:28:42
Toegewezen door INCIBE
CVSS-score 8.7
Status PUBLISHED

Beschrijving

SQL injection vulnerability in Summar Software´s Portal del Empleado. This vulnerability allows an attacker to retrieve, create, update, and delete the database by sending a POST request using the parameter “ctl00$ContentPlaceHolder1$filtroNombre” in “/MemberPages/quienesquien.aspx”.