Security Advisory

CVE-2025-41348

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-11-18 11:24:06

Last updated 2026-02-18 12:16:33

Assigner INCIBE

CVSS score 8.7

State PUBLISHED

Description

SQL injection vulnerability in WinPlus v24.11.27 by Informática del Este. This vulnerability allows an attacker recover, create, update an delete databases by sendng a POST request using the parameters 'val1' and 'cont in '/WinplusPortal/ws/sWinplus.svc/json/getacumper_post'.

← Browse all CVEs View on cve.org ↗