Vulnerabilidades do Obedalvarado Facturation System
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Obedalvarado Facturation System: 1 registro(s), com versões afetadas e correções.
CVE-2018-25191
Alta · 7.1
CWE-89 06/03/2026
Facturation System 1.0 SQL Injection via editar_producto.php
Facturation System 1.0 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'mod_id' parameter. Attackers can send POST requests to the editar_producto.php endpoint with crafted SQL payloads in the mod_id parameter to extract sensitive database information including usernames, database names, and version details.