CVE-2025-2118

A vulnerability was found in Quantico Tecnologia PRMV 6.48. It has been classified as critical. This affects an unknown part of the file /admin/login.php of the component Login Endpoint. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack...

CVE-2025-2118 Quantico Tecnologia PRMV Login Endpoint login.php sql injection

A vulnerability was found in Quantico Tecnologia PRMV 6.48. It has been classified as critical. This affects an unknown part of the file /admin/login.php of the component Login Endpoint. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack...

CVE-2025-2118

CVE-2025-2118 concerns Quantico Tecnologia PRMV 6.48, specifically the Login Endpoint component. The vulnerability arises from manipulation of the username parameter in /admin/login.php, enabling SQL injection. It is a network-exposed issue that can be exploited remotely, and public disclosure of...