CVE-2025-40677 | Summar Portal del Empleado 3.98.0 POST Request quienesquien.aspx ctl00$ContentPlaceHolder1$filtroNombre sql injection

September 18, 2025 Yanac

A vulnerability categorized as critical has been discovered in Summar Portal del Empleado 3.98.0. Affected by this vulnerability is an unknown functionality of the file /MemberPages/quienesquien.aspx of the component POST Request Handler. Executing manipulation of the argument ctl00$ContentPlaceHolder1$filtroNombre can lead to sql injection.

This vulnerability appears as CVE-2025-40677. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More