CVE-2025-41009 SQL injection on the virtual campus platform of Diseño de Recursos Educativos

SQL injection vulnerability in the DRED virtual campus platform. This vulnerability allows an attacker to retrieve, create, update, and delete data from the database by sending a POST request using the ‘buscame’ parameter in ‘/catalogoc/catalogo.php’...

PT-2025-43938

Name of the Vulnerable Software and Affected Versions DRED virtual campus platform affected versions not specified Description A SQL injection issue exists in the DRED virtual campus platform. An attacker can retrieve, create, update, and delete data from the database. This is achieved by sending...