CNNVD-202509-4001 Information
Sep 25, 2025
cve
CNNVD ID
CNNVD-202509-4001
Related CVE
- CNNVD Published: 2025-09-25
Description (Chinese)
Prevengos是巴西Prevengos公司的一款风险预防管理软件。 Prevengos v2.44版本存在SQL注入漏洞，该漏洞源于对文件/servicios/autorizaciones.asmx/mfsRecuperarListado中参数mpsCentroin、mpsEmpresa、mpsProyecto和mpsContrata的错误操作，可能导致SQL注入攻击。
Description (English)
Prevengos is a risk prevention management software for Prevengos, Brazil. Prevengos v. 2.44 has an injection loophole in SQL, which stems from an error in the mpsCentroin, mpsEmpresa, mpsProyecto and mpsContrata of the parameters in the document/servicios/autorizaciones.asmx/mfsRecuperarListado, which could lead to an attack on SQL injection.
Hazard Level
High
Vulnerability Type
SQL注入
Affected Vendor
Prevengos
Published
2025-09-25
Last Modified
2026-02-24