https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 06:24:16 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-266695 EUVD-2026-266695 https://cve.radiocsirt.org/vuln/euvd-2026-266695 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1481 <p>An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter &#39;Id_usuario&#39; in &#39;/evaluacion_objetivos_anyo_sig_ver_auto.aspx&#39;, could allow an attacker to extract sensitive information from the database through external channels, without the affected application returning the data directly, compromising the confidentiality of the stored information.</p> <p>An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter &#39;Id_usuario&#39; in &#39;/evaluacion_objetivos_anyo_sig_ver_auto.aspx&#39;, could allow an attacker to extract sensitive information from the database through external channels, without the affected application returning the data directly, compromising the confidentiality of the stored information.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-1481 https://cve.radiocsirt.org/vuln/ghsa-cq8v-x2f4-24hh <p>An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter &#39;Id_usuario&#39; in &#39;/evaluacion_objetivos_anyo_sig_ver_auto.aspx&#39;, could allow an attacker to extract sensitive information from the database through external channels, without the affected application returning the data directly, compromising the confidentiality of the stored information.</p> <p>An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter &#39;Id_usuario&#39; in &#39;/evaluacion_objetivos_anyo_sig_ver_auto.aspx&#39;, could allow an attacker to extract sensitive information from the database through external channels, without the affected application returning the data directly, compromising the confidentiality of the stored information.</p> https://cve.radiocsirt.org/vuln/ghsa-cq8v-x2f4-24hh