CVE-2025-41009: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the DRED virtual campus platform. This vulnerability allows an attacker to retrieve, create, update, and delete data from the database by sending a POST request using the ‘buscame’ parameter in ‘/catalogoc/catalogo.php’...

Diseño de Recursos Educativos Virtual Campus Platform SQL注入漏洞

Diseño de Recursos Educativos Virtual Campus Platform is a virtual classroom platform from Diseño de Recursos Educativos, Spain. Diseño de Recursos Educativos Virtual Campus Platform suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter buscame in the...