Beveiligingsadvies

CVE-2025-41009

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-10-27 11:35:35

Laatst bijgewerkt 2025-10-27 13:17:02

Toegewezen door INCIBE

CVSS-score 9.3

Status PUBLISHED

Beschrijving

SQL injection vulnerability in the DRED virtual campus platform. This vulnerability allows an attacker to retrieve, create, update, and delete data from the database by sending a POST request using the ‘buscame’ parameter in ‘/catalogo_c/catalogo.php’.

← Alle CVE's bekijken Bekijk op cve.org ↗