CVE-2025-40677

SQL injection vulnerability in Summar Software´s Portal del Empleado. This vulnerability allows an attacker to retrieve, create, update, and delete the database by sending a POST request using the parameter “ctl00$ContentPlaceHolder1$filtroNombre” in “/MemberPages/quienesquien.aspx”...

CVE-2025-40677 SQL injection vulnerability in Summar Software´s Portal del Empleado

SQL injection vulnerability in Summar Software´s Portal del Empleado. This vulnerability allows an attacker to retrieve, create, update, and delete the database by sending a POST request using the parameter “ctl00$ContentPlaceHolder1$filtroNombre” in “/MemberPages/quienesquien.aspx”...

CVE-2025-40677

CVE-2025-40677 describes an SQL injection in Summar Software’s Portal del Empleado. The vulnerability is triggered by a POST request to /MemberPages/quienesquien.aspx that supplies the parameter ctl00$ContentPlaceHolder1$filtroNombre, allowing an attacker to retrieve, create, update, and delete d...