Threats tagged 'ghsa-qj3m-73c6-4ww7'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.3	EPSS 0.3%	CVE-2025-10870DIAL's CentrosNet · SQL Injection Vulnerability Critical9.3EPSS 0.3%2025-11-07GCVE DatabaseCVE-2025-10870 DIAL's CentrosNet version 2.64 contains a critical SQL injection vulnerability in the 'ultralogin' parameter of the '/centrosnet/ultralogin.php' endpoint. This flaw allows unauthenticated attackers to perform unauthorized database operations including retrieval, creation, update, and deletion via crafted POST and GET requests. EPSS 0.3%Report on CVE-2025-10870 Vulnerability CWE-89 #ghsa-qj3m-73c6-4ww7	GCVE Database	2025-11-07

Page 1 of 1