CVE-2025-13792 Qualitor getResumo.php eval code injection

A security flaw has been discovered in Qualitor up to 8.20.104/8.24.97. Affected by this vulnerability is the function eval of the file /html/st/stdeslocamento/request/getResumo.php. Performing a manipulation of the argument passageiros results in code injection. Remote exploitation of the attack...

CVE-2025-13792

Qualitor is affected by a code injection vulnerability in the getResumo.php handler under /html/st/stdeslocamento/request/. The flaw arises from unsafe manipulation of the passageiros argument to the eval() function, enabling remote code execution. Multiple sources (Qualitor advisories and third-...