CVE-2025-41009
CRITICAL—CVSS v3
—CVSS v2
0.30%
EPSS (exploit probability)
CWE-89CWE
Description
SQL injection vulnerability in the DRED virtual campus platform. This vulnerability allows an attacker to retrieve, create, update, and delete data from the database by sending a POST request using the ‘buscame’ parameter in ‘/catalogo_c/catalogo.php’.
Affected routers (0)
No routers currently mapped to this CVE in our database.