Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q3pr-jgqf-pq73

Опубликовано: 27 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 9.3

Описание

SQL injection vulnerability in the DRED virtual campus platform. This vulnerability allows an attacker to retrieve, create, update, and delete data from the database by sending a POST request using the ‘buscame’ parameter in ‘/catalogo_c/catalogo.php’.

SQL injection vulnerability in the DRED virtual campus platform. This vulnerability allows an attacker to retrieve, create, update, and delete data from the database by sending a POST request using the ‘buscame’ parameter in ‘/catalogo_c/catalogo.php’.

EPSS

Процентиль: 14%
0.00045
Низкий

9.3 Critical

CVSS4

Дефекты

CWE-89

Связанные уязвимости

nvd
3 месяца назад

SQL injection vulnerability in the DRED virtual campus platform. This vulnerability allows an attacker to retrieve, create, update, and delete data from the database by sending a POST request using the ‘buscame’ parameter in ‘/catalogo_c/catalogo.php’.

EPSS

Процентиль: 14%
0.00045
Низкий

9.3 Critical

CVSS4

Дефекты

CWE-89