CVE-2025-41028 — SQL injection in Epsilon RH
A SQL Injection vulnerability has been found in Epsilon RH by Grupo Castilla. This vulnerability allows an attacker to retrieve, create, update and delete database via sending a…
Published: 2025-10-20 · CVSS: 9.3 · CVSS 4.0
A SQL Injection vulnerability has been found in Epsilon RH by Grupo Castilla. This vulnerability allows an attacker to retrieve, create, update and delete database via sending a POST request using the parameter ‘sEstadoUsr’ in ‘/epsilonnetws/WSAvisos.asmx’.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7