CNNVD-202601-4505 Information

CNNVD ID

CNNVD-202601-4505

CVE-2026-1475

  • CNNVD Published: 2026-01-27

Description (Chinese)

Quatuor Evaluación de Desempeño是西班牙Quatuor公司的一个绩效评估系统。 Quatuor Evaluación de Desempeño存在SQL注入漏洞,该漏洞源于文件/evaluacion_acciones_evalua.aspx中参数Id_usuario存在带外SQL注入,可能导致数据库敏感信息泄露。

Description (English)

Quatuor Evaluación de Desempeño is a performance appraisal system of the Spanish company Quatuor. Quatuor Evaluación de Desempeño had a SQL-infusion loophole, which stemmed from the external SQL injection of Id usuario, the parameter in document/evaluacion accciones evalua.aspx, which could lead to the release of sensitive information from the database.

Hazard Level

Low

Vulnerability Type

SQL注入

Affected Vendor

Quatuor

Published

2026-01-27

Last Modified

2026-02-24

References

https://www.incibe.es/en/incibe-cert/notices/aviso/out-band-sql-injection-quatuor-performance-evaluation

Patch

https://quatuor.com/#

Share on: