CVE-2025-41009

SQL injection vulnerability in the DRED virtual campus platform. This vulnerability allows an attacker to retrieve, create, update, and delete data from the database by sending a POST request using the ‘buscame’ parameter in ‘/catalogoc/catalogo.php’...

CVE-2025-41009

SQL injection vulnerability in the DRED virtual campus platform. This vulnerability allows an attacker to retrieve, create, update, and delete data from the database by sending a POST request using the ‘buscame’ parameter in ‘/catalogoc/catalogo.php’...

EUVD-2025-36157

SQL injection vulnerability in the DRED virtual campus platform. This vulnerability allows an attacker to retrieve, create, update, and delete data from the database by sending a POST request using the ‘buscame’ parameter in ‘/catalogoc/catalogo.php’...

CVE-2025-41009 SQL injection on the virtual campus platform of Diseño de Recursos Educativos

SQL injection vulnerability in the DRED virtual campus platform. This vulnerability allows an attacker to retrieve, create, update, and delete data from the database by sending a POST request using the ‘buscame’ parameter in ‘/catalogoc/catalogo.php’...

CVE-2025-41009

CVE-2025-41009 is a SQL injection in the DRED virtual campus platform (Diseño de Recursos Educativos). The vulnerability arises via a POST request to /catalogo_c/catalogo.php using the buscame parameter, allowing an attacker to retrieve, create, update, and delete data in the database. Multiple s...

CVE-2025-41009 SQL injection on the virtual campus platform of Diseño de Recursos Educativos

SQL injection vulnerability in the DRED virtual campus platform. This vulnerability allows an attacker to retrieve, create, update, and delete data from the database by sending a POST request using the ‘buscame’ parameter in ‘/catalogoc/catalogo.php’...

PT-2025-43938

Name of the Vulnerable Software and Affected Versions DRED virtual campus platform affected versions not specified Description A SQL injection issue exists in the DRED virtual campus platform. An attacker can retrieve, create, update, and delete data from the database. This is achieved by sending...

catalogo.fondazionezeri.unibo.it Cross Site Scripting vulnerability OBB-3406600

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

catalogo.escuelaing.edu.co Open Redirect vulnerability

Security Researcher drok3r Helped patch 244 vulnerabilities Received 4 Coordinated Disclosure badges Received 1 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting catalogo.escuelaing.edu.co website and its users. Following...

motoriber.es XSS vulnerability

Open Bug Bounty ID: OBB-674587 Description| Value ---|--- Affected Website:| motoriber.es Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

catalogo.marbade.com XSS vulnerability

Open Bug Bounty ID: OBB-584343 Description| Value ---|--- Affected Website:| catalogo.marbade.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

catalogo.mp.gob.ve XSS vulnerability

Vulnerable URL: http://catalogo.mp.gob.ve/min-publico/doctrina/php/buscar.php?base=doctri=doctri.par==w=detalle=!IINDEMNIZACION"'--!...

hipertimetech.pt XSS vulnerability

Vulnerable URL: http://www.hipertimetech.pt/catalogo/index.php?cat=416"=1 Details: Description| Value ---|--- Patched:| Yes, at 17.02.2017 Latest check for patch:| 17.02.2017 02:59 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16455378 VIP website status:| No...

CVE-2010-2012

SQL injection vulnerability in function.php in MigasCMS 1.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the categorie parameter in a catalogo action. NOTE: some of these details are obtained from third party information...

CVE-2010-2012

Overview: CVE-2010-2012 describes an SQL injection in MigasCMS 1.1. Affected software/component: MigasCMS 1.1; vulnerable code path is in function.php. Root cause / trigger: When magic_quotes_gpc is disabled, an attacker can manipulate the categorie parameter in a catalogo action to execute arbit...

CVE-2010-2012: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in function.php in MigasCMS 1.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the categorie parameter in a catalogo action. NOTE: some of these details are obtained from third party information...

RMSOFT-xss.txt

Cross Site Scripting In RMSOFT Catalogo de Imagenes URL: modules/rmgs/images.php?kw=alertdocument.cookie&q=search Google Dork: allinurl: /modules/rmgs/ Potenciado for XOOPS All Versions Greetz: ANtrAX,HANOWARS,4UREV01R & WWW.C-GROUP.ORG...