Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/11/08 9:56 a.m.3 views

CVE-2025-10870

SQL injection vulnerability in DIAL's CentrosNet v2.64. Allows an attacker to retrieve, create, update, and delete databases by sending POST and GET requests with the 'ultralogin' parameter in '/centrosnet/ultralogin.php'...

9.3CVSS8.1AI score0.00038EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/07 12:31 p.m.3 views

EUVD-2025-38246

SQL injection vulnerability in DIAL's CentrosNet v2.64. Allows an attacker to retrieve, create, update, and delete databases by sending POST and GET requests with the 'ultralogin' parameter in '/centrosnet/ultralogin.php'...

9.3CVSS7.5AI score0.00038EPSS
Exploits0References2
NVD
NVD
added 2025/11/07 10:15 a.m.3 views

CVE-2025-10870

SQL injection vulnerability in DIAL's CentrosNet v2.64. Allows an attacker to retrieve, create, update, and delete databases by sending POST and GET requests with the 'ultralogin' parameter in '/centrosnet/ultralogin.php'...

9.3CVSS0.00038EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/11/07 9:26 a.m.3 views

CVE-2025-10870 SQL injection in DIAL's CentrosNet

SQL injection vulnerability in DIAL's CentrosNet v2.64. Allows an attacker to retrieve, create, update, and delete databases by sending POST and GET requests with the 'ultralogin' parameter in '/centrosnet/ultralogin.php'...

9.3CVSS7.6AI score0.00038EPSS
Exploits0References1
CVE
CVE
added 2025/11/07 9:26 a.m.14 views

CVE-2025-10870

Summary: CVE-2025-10870 is a SQL injection in DIAL CentrosNet, affecting version(s) prior to 2.65. The flaw exists in the /centrosnet/ultralogin.php endpoint via the ultralogin parameter, allowing an attacker to retrieve, create, update, and delete databases. The primary affected component is Cen...

9.3CVSS7.6AI score0.00038EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/11/07 9:26 a.m.3 views

CVE-2025-10870 SQL injection in DIAL's CentrosNet

SQL injection vulnerability in DIAL's CentrosNet v2.64. Allows an attacker to retrieve, create, update, and delete databases by sending POST and GET requests with the 'ultralogin' parameter in '/centrosnet/ultralogin.php'...

9.3CVSS0.00038EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/11/07 12:0 a.m.2 views

DIAL CentrosNET App SQL注入漏洞

DIAL CentrosNET App is a mobile application for students, teachers and school administrators from the Spanish company DIAL. A SQL injection vulnerability exists in DIAL CentrosNET App version v2.64, which stems from incorrect manipulation of the parameter ultralogin in the file...

9.3CVSS7.5AI score0.00038EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/07 12:0 a.m.4 views

PT-2025-45415

Name of the Vulnerable Software and Affected Versions DIAL CentrosNet versions prior to 2.65 Description A SQL injection issue exists in DIAL's CentrosNet. An attacker can retrieve, create, update, and delete databases by sending POST and GET requests. The vulnerability is present in the...

9.3CVSS7.6AI score0.00038EPSS
Exploits0References8
Rows per page
Query Builder