Description
SQL injection vulnerability in the DRED virtual campus platform. This vulnerability allows an attacker to retrieve, create, update, and delete data from the database by sending a POST request using the ‘buscame’ parameter in ‘/catalogo_c/catalogo.php’.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Disenno de Recursos Educativos S.L | virtual campus platform | all versions | — |