EUVD-2026-67008

The ‘/ws/apitribuna/setVisita’ endpoint is vulnerable to SQL injection through the idvideo and idambito parameters. The application does not validate or sanitize these inputs before including them in SQL queries. This allows a remote attacker to inject SQL syntax and disrupt the execution of...

PT-2026-82495

The ‘/ws/apitribuna/setVisita’ endpoint is vulnerable to SQL injection through the id video and id ambito parameters. The application does not validate or sanitize these inputs before including them in SQL queries. This allows a remote attacker to inject SQL syntax and disrupt the execution of...

PT-2026-82498

A vulnerability in the endpoint ‘/ws/apitribuna/ultimosVideos’ where the limit videos parameter is directly concatenated into a MariaDB SQL query without proper sanitization or parameterization. By injecting SQL syntax into this parameter, a remote attacker can cause SQL syntax errors and...