CNNVD-202601-4510 Information

CNNVD ID

CNNVD-202601-4510

CVE-2026-1473

  • CNNVD Published: 2026-01-27

Description (Chinese)

Quatuor Evaluación de Desempeño是西班牙Quatuor公司的一个绩效评估系统。 Quatuor Evaluación de Desempeño存在SQL注入漏洞,该漏洞源于文件/evaluacion_competencias_evalua.aspx中参数Id_usuario存在带外SQL注入,可能导致数据库敏感信息泄露。

Description (English)

Quatuor Evaluación de Desempeño is a performance appraisal system of the Spanish company Quatuor. Quatuor Evaluación de Desempeño has a leak in SQL, which stems from the external SQL injection of Id usuario, the parameter in document /evaluacion competencias evalua.aspx, which may lead to the release of sensitive information from the database.

Hazard Level

Low

Vulnerability Type

SQL注入

Affected Vendor

Quatuor

Published

2026-01-27

Last Modified

2026-02-24

References

https://www.incibe.es/en/incibe-cert/notices/aviso/out-band-sql-injection-quatuor-performance-evaluation

Patch

https://quatuor.com/#

Share on: