Vulnerabilidades de Sbitsoft

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Sbitsoft: 2 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2025-40639 Crítica · 9.8 CWE-89 09/03/2026

SQL injection in Eventobot

A SQL injection vulnerability has been found in Eventobot. This vulnerability allows an attacker to retrieve, create, update and delete databases through the 'promo_send' parameter in the '/assets/php/calculate_discount.php'.

CVE-2025-40638 Média · 6.1 CWE-79 09/03/2026

Reflected Cross-Site Scripting (XSS) in Eventobot

A reflected Cross-Site Scripting (XSS) vulnerability has been found in Eventobot. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending him/her a malicious URL using the 'name' parameter in '/search-results'. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user.