Disenno de Recursos Educativos S.L vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Disenno de Recursos Educativos S.L products: 1 record(s), with severity, exploitation and fixes.

Virtual Campus Platform 1

Exploited only (KEV) →

CVE-2025-41009 Critical · 9.3 CWE-89 Oct 27, 2025

SQL injection on the virtual campus platform of Diseño de Recursos Educativos

SQL injection vulnerability in the DRED virtual campus platform. This vulnerability allows an attacker to retrieve, create, update, and delete data from the database by sending a POST request using the ‘buscame’ parameter in ‘/catalogo_c/catalogo.php’.