CVE-2025-41028: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability has been found in Epsilon RH by Grupo Castilla. This vulnerability allows an attacker to retrieve, create, update and delete database via sending a POST request using the parameter ‘sEstadoUsr’ in ‘/epsilonnetws/WSAvisos.asmx’...

PT-2025-42755

Name of the Vulnerable Software and Affected Versions Epsilon RH affected versions not specified Description A SQL Injection issue exists in Epsilon RH by Grupo Castilla. This allows an attacker to retrieve, create, update, and delete database information. Exploitation occurs by sending a POST...