CVE-2025-28009

CVE-2025-28009 affects Dietiqa App v1.0.20. A SQL injection exists in the progress-body-weight.php endpoint via the u parameter, enabling arbitrary SQL execution with remote access (attack vector: network; no privileges; user interaction not required). This yields high confidentiality, integrity,...