CVE-2025-2199

SQL injection vulnerability in the Innovación y Cualificación local administration plugin ajax.php. This vulnerability allows an attacker to obtain, update and delete data from the database by injecting an SQL query in ‘searchActionsToUpdate’, ‘searchSpecialitiesPending’,...

CVE-2025-2202 Broken access control vulnerability in the Innovación y Cualificación local administration plugin ajax.php

Broken access control vulnerability in the Innovación y Cualificación local administration plugin ajax.php. This vulnerability allows an attacker to obtain sensitive information about other users such as id, name, login and email...

CVE-2025-2199

CVE-2025-2199 describes an SQL injection vulnerability in the Innovación y Cualificación local administration plugin ajax.php. The flaw allows an attacker to inject SQL via multiple parameters (searchActionsToUpdate, searchSpecialitiesPending, searchSpecialitiesLinked, searchUsersToUpdateProfile,...

PT-2025-11465

Name of the Vulnerable Software and Affected Versions Innovación y Cualificación Local Administration Plugin affected versions not specified Description The issue is related to a SQL injection vulnerability in the Innovación y Cualificación local administration plugin ajax.php. This vulnerability...

PT-2025-11470

Name of the Vulnerable Software and Affected Versions Innovación y Cualificación Local Administration Plugin affected versions not specified Description The issue is related to a broken access control vulnerability in the Innovación y Cualificación local administration plugin, specifically in the...