CVE-2025-28009

A SQL Injection vulnerability exists in the u parameter of the progress-body-weight.php endpoint of Dietiqa App v1.0.20...

CVE-2025-28009

A SQL Injection vulnerability exists in the Dietiqa App v1.0.20 (by Appventure Sdn Bhd). The flaw is located in the u parameter of the progress-body-weight.php endpoint due to unsanitized input , which allows an unauthenticated remote attacker to inject arbitrary SQL queries into the backend data...