CNNVD-202509-3013 Information
Sep 18, 2025
cve
CNNVD ID
CNNVD-202509-3013
Related CVE
- CNNVD Published: 2025-09-18
Description (Chinese)
Summar Portal del Empleado是西班牙Summar公司的一个员工门户系统。 Summar Portal del Empleado存在SQL注入漏洞，该漏洞源于对文件/MemberPages/quienesquien.aspx中参数ctl00$ContentPlaceHolder1$filtroNombre的错误操作，可能导致SQL注入攻击。
Description (English)
Summar Portal del Empleado is an employee portal system for Summar in Spain. Summar Portal del Empleado has an SQL injection loophole, which stems from an error in the tl00 ContentPlaceHolder of $1 million in the document/MemberPages/quienesquien.aspx, which could lead to an SQL injection attack.
Hazard Level
High
Vulnerability Type
SQL注入
Affected Vendor
向日葵
Published
2025-09-18
Last Modified
2026-02-24
References
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-summar-software-employee-portal https://www.exploit-db.com/exploits/52462 https://cxsecurity.com/issue/WLB-2025120018
Share on: