Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-1478 1 Quatuor 2 Evaluaci N De Desempe O Edd , Evaluacion De Desempeno 2026-03-24 7.5 High
An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Id_usuario' and 'Id_evaluacion’ in ‘/evaluacion_hca_evalua.aspx’, could allow an attacker to extract sensitive information from the database through external channels, without the affected application returning the data directly, compromising the confidentiality of the stored information.