CVE-2025-41028

A SQL Injection vulnerability has been found in Epsilon RH by Grupo Castilla. This vulnerability allows an attacker to retrieve, create, update and delete database via sending a POST request using the parameter ‘sEstadoUsr’ in ‘/epsilonnetws/WSAvisos.asmx’...

Grupo Castilla Epsilon RH 安全漏洞

Grupo Castilla Epsilon RH is a human resource management software from the Spanish company Grupo Castilla. A security vulnerability exists in Grupo Castilla Epsilon RH, which stems from incorrect manipulation of the parameter sEstadoUsr in the file /epsilonnetws/WSAvisos.asmx, which could lead to...

CVE-2025-41028: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability has been found in Epsilon RH by Grupo Castilla. This vulnerability allows an attacker to retrieve, create, update and delete database via sending a POST request using the parameter ‘sEstadoUsr’ in ‘/epsilonnetws/WSAvisos.asmx’...

PT-2025-42755

Name of the Vulnerable Software and Affected Versions Epsilon RH affected versions not specified Description A SQL Injection issue exists in Epsilon RH by Grupo Castilla. This allows an attacker to retrieve, create, update, and delete database information. Exploitation occurs by sending a POST...