Approved changes feed: RSS · Atom

cpe:2.3:a:quatuor:evaluaci_n_de_desempe_o_edd_:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorQuatuor (9f284e25-8b37-5e06-980a-591da64c69ec)
ProductEvaluaci N De Desempe O Edd (8f15d8b8-c9ed-5581-92d9-c5981dd394fb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-1478 vulnerable 2026-06-08 07:49:08.708850 Out-of-band SQL injection in Quatuor Performance Evaluation
An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Id_usuario' and 'Id_evaluacion’ in ‘/evaluacion_hca_evalua.aspx’, could allow an attacker to extract sensitive information from the database through external channels, without the affected application returning the data directly, compromising the confidentiality of the stored information.
Published: 2026-01-27T16:30:35.628Z
Updated: 2026-03-24T15:40:06.500Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.