CVE-2025-41009

SQL injection vulnerability in the DRED virtual campus platform. This vulnerability allows an attacker to retrieve, create, update, and delete data from the database by sending a POST request using the ‘buscame’ parameter in ‘/catalogoc/catalogo.php’...

EUVD-2025-36157

SQL injection vulnerability in the DRED virtual campus platform. This vulnerability allows an attacker to retrieve, create, update, and delete data from the database by sending a POST request using the ‘buscame’ parameter in ‘/catalogoc/catalogo.php’...

CVE-2025-41009

CVE-2025-41009 is a SQL injection in the DRED virtual campus platform (Diseño de Recursos Educativos). The vulnerability arises via a POST request to /catalogo_c/catalogo.php using the buscame parameter, allowing an attacker to retrieve, create, update, and delete data in the database. Multiple s...