Security Advisory
CVE-2025-41009
N/A
UNKNOWN
Vulnerability Description
SQL injection vulnerability in the DRED virtual campus platform. This vulnerability allows an attacker to retrieve, create, update, and delete data from the database by sending a POST request using the ‘buscame’ parameter in ‘/catalogo_c/catalogo.php’.
Published Date
October 27, 2025
Official Source
NIST NVD Advisory