https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 05:02:55 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-277205 EUVD-2026-277205 https://cve.radiocsirt.org/vuln/euvd-2026-277205 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1478 <p>An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter &#39;Id_usuario&#39; and &#39;Id_evaluacion’ in ‘/evaluacion_hca_evalua.aspx’, could allow an attacker to extract sensitive information from the database through external channels, without the affected application returning the data directly, compromising the confidentiality of the stored information.</p> <p>An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter &#39;Id_usuario&#39; and &#39;Id_evaluacion’ in ‘/evaluacion_hca_evalua.aspx’, could allow an attacker to extract sensitive information from the database through external channels, without the affected application returning the data directly, compromising the confidentiality of the stored information.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-1478 https://cve.radiocsirt.org/vuln/ghsa-pmf7-jg2w-c5f4 <p>An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter &#39;Id_usuario&#39; and &#39;Id_evaluacion’ in ‘/evaluacion_hca_evalua.aspx’, could allow an attacker to extract sensitive information from the database through external channels, without the affected application returning the data directly, compromising the confidentiality of the stored information.</p> <p>An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter &#39;Id_usuario&#39; and &#39;Id_evaluacion’ in ‘/evaluacion_hca_evalua.aspx’, could allow an attacker to extract sensitive information from the database through external channels, without the affected application returning the data directly, compromising the confidentiality of the stored information.</p> https://cve.radiocsirt.org/vuln/ghsa-pmf7-jg2w-c5f4