CVE-2025-40698
25.09.2025, 12:15
SQL injection vulnerability in Prevengos v2.44 by Nedatec Consulting. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a POST request using the parameters mpsCentroin, mpsEmpresa, mpsProyecto, and mpsContrata in /servicios/autorizaciones.asmx/mfsRecuperarListado.
Awaiting analysis
This vulnerability is currently awaiting analysis.