A vulnerability was found in Benner ModernaNet up to 1.1.0. It has been classified as critical. This affects an unknown part of the file /AGE0000700/GetHorariosDoDia?idespec=0&idproced=1103&data=2025-02-25+19%3A25&agserv=0&convenio=1&localatend=1&idplano=5&pesfis=01&idprofissional=0&target=.horarios--dia--d0&_=1739371223797. The manipulation leads to sql injection. It is possible to initiate the attack remotely. Upgrading to version 1.1.1 is able to address this issue. It is recommended to upgrade the affected component.
References
| Link | Resource |
|---|---|
| https://github.com/yago3008/cves | Third Party Advisory Exploit |
| https://vuldb.com/?ctiid.296691 | Permissions Required VDB Entry |
| https://vuldb.com/?id.296691 | Permissions Required VDB Entry |
| https://vuldb.com/?submit.499875 | VDB Entry Exploit Third Party Advisory |
Configurations
History
28 Feb 2025, 01:55
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| References | () https://vuldb.com/?id.296691 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?submit.499875 - VDB Entry, Exploit, Third Party Advisory | |
| References | () https://github.com/yago3008/cves - Third Party Advisory, Exploit | |
| References | () https://vuldb.com/?ctiid.296691 - Permissions Required, VDB Entry | |
| CPE | cpe:2.3:a:modernasistemas:modernanet:*:*:*:*:*:*:*:* | |
| First Time |
Modernasistemas modernanet
Modernasistemas |
25 Feb 2025, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-25 00:15
Updated : 2025-02-28 01:55
NVD link : CVE-2025-1641
Mitre link : CVE-2025-1641
JSON object : View
Products Affected
modernasistemas
- modernanet