Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3wq4-5xg6-q6v6

Опубликовано: 25 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 8.7

Описание

SQL injection vulnerability in Prevengos v2.44 by Nedatec Consulting. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a POST request using the parameters “mpsCentroin”, “mpsEmpresa”, “mpsProyecto”, and “mpsContrata” in “/servicios/autorizaciones.asmx/mfsRecuperarListado”.

SQL injection vulnerability in Prevengos v2.44 by Nedatec Consulting. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a POST request using the parameters “mpsCentroin”, “mpsEmpresa”, “mpsProyecto”, and “mpsContrata” in “/servicios/autorizaciones.asmx/mfsRecuperarListado”.

EPSS

Процентиль: 18%
0.00058
Низкий

8.7 High

CVSS4

Дефекты

CWE-89

Связанные уязвимости

nvd
5 месяцев назад

SQL injection vulnerability in Prevengos v2.44 by Nedatec Consulting. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a POST request using the parameters “mpsCentroin”, “mpsEmpresa”, “mpsProyecto”, and “mpsContrata” in “/servicios/autorizaciones.asmx/mfsRecuperarListado”.

EPSS

Процентиль: 18%
0.00058
Низкий

8.7 High

CVSS4

Дефекты

CWE-89