CVE-2025-41009: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the DRED virtual campus platform. This vulnerability allows an attacker to retrieve, create, update, and delete data from the database by sending a POST request using the ‘buscame’ parameter in ‘/catalogoc/catalogo.php’...

Design of Educational Resources – SQL Injection Vulnerability in Virtual Campus Platform

Diseño de Recursos Educativos Virtual Campus Platform is a virtual classroom platform from Diseño de Recursos Educativos, Spain. Diseño de Recursos Educativos Virtual Campus Platform suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter buscame in the...