Skip to content
OpenAdvisories

Vendor

Informatica del Este

5 known vulnerabilities.

Products

WinPlus 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2025-41348

    Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Este

    SQL injection vulnerability in WinPlus v24.11.27 by Informática del Este. This vulnerability allows an attacker recover, create, update an delete databases by sendng a POST request using the parameters 'val1' and 'cont in '/WinplusPortal/ws/sWinplus.svc/json/…

    Informatica del Este WinPlus
  • High 8.7
    CVE-2025-41347

    Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Este

    Unlimited upload vulnerability for dangerous file types in WinPlus v24.11.27 from Informática del Este. This vulnerability allows an attacker to upload a 'webshell' by sending a POST request to '/WinplusPortal/ws/sWinplus.svc/json/uploadfile'.

    Informatica del Este WinPlus