Obedalvarado Facturation System vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Obedalvarado Facturation System: 1 record(s), with affected versions and fixes.

CVE-2018-25191 High · 7.1 CWE-89 Mar 6, 2026

Facturation System 1.0 SQL Injection via editar_producto.php

Facturation System 1.0 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'mod_id' parameter. Attackers can send POST requests to the editar_producto.php endpoint with crafted SQL payloads in the mod_id parameter to extract sensitive database information including usernames, database names, and version details.