CVE-2019-25159

A vulnerability was found in mpedraza2020 Intranet del Monterroso up to 4.50.0. It has been classified as critical. This affects an unknown part of the file config/cargos.php. The manipulation of the argument dniprofe leads to sql injection. Upgrading to version 4.51.0 is able to address this...

CVE-2019-25159

The CVE-2019-25159 entry concerns mpedraza2020 Intranet del Monterroso versions up to 4.50.0. The vulnerability arises from a SQL injection in the dni_profe argument within the file config/cargos.php. Exploitation could allow an attacker to manipulate the database without authentication. Remediat...