CNNVD-202601-4508 Information

CNNVD ID

CNNVD-202601-4508

CVE-2026-1472

  • CNNVD Published: 2026-01-27

Description (Chinese)

Quatuor Evaluación de Desempeño是西班牙Quatuor公司的一个绩效评估系统。 Quatuor Evaluación de Desempeño存在SQL注入漏洞,该漏洞源于文件/evaluacion_competencias_autoeval_list.aspx中参数txAny存在带外SQL注入,可能导致数据库敏感信息泄露。

Description (English)

Quatuor Evaluación de Desempeño is a performance appraisal system of the Spanish company Quatuor. Quatuor Evaluación de Desempeño has a leak in SQL, which stems from the txAny external SQL injection in document/evaluación competencias auteauval list.aspx, which could lead to the release of sensitive information from the database.

Hazard Level

Low

Vulnerability Type

SQL注入

Affected Vendor

Quatuor

Published

2026-01-27

Last Modified

2026-02-24

References

https://www.incibe.es/en/incibe-cert/notices/aviso/out-band-sql-injection-quatuor-performance-evaluation

Patch

https://quatuor.com/#

Share on: