Approved changes feed: RSS · Atom

cpe:2.3:a:obedalvarado:facturation_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorObedalvarado (ed5f97a5-4285-5130-bf2f-458f7e8a7beb)
ProductFacturation System (c3a9609e-4b71-5a1c-b822-517515aca686)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-25191 vulnerable 2026-06-08 05:11:29.554144 Facturation System 1.0 SQL Injection via editar_producto.php
HIGH (7.1)
Facturation System 1.0 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'mod_id' parameter. Attackers can send POST requests to the editar_producto.php endpoint with crafted SQL payloads in the mod_id parameter to extract sensitive database information including usernames, database names, and version details.
Published: 2026-03-06T12:19:16.652Z
Updated: 2026-03-09T18:01:09.074Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.