CVE-2025-29529

ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component Forgotpassword.aspx...

CVE-2025-29529

The ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 is vulnerable to a SQL injection flaw in the ForgotPassword.aspx component. The vulnerability stems from a lack of sanitization on the POST parameter ctl00%24cpLogin%24ctlForgotPassword%24txtEmail, which allows an unauthenticated attac...

PT-2025-17858 · Itc Systems · Itc Systems Multiplan/Matrix Onecard

Name of the Vulnerable Software and Affected Versions: ITC Systems Multiplan/Matrix OneCard platform version 3.7.4.1002 Description: The issue is related to a SQL injection vulnerability. It affects the Forgotpassword.aspx component. Recommendations: For version 3.7.4.1002, consider restricting...