← CVE Intelligence

CVE-2025-41028

SQL injection in Epsilon RH PUBLISHED

Description (CNA)

A SQL Injection vulnerability has been found in Epsilon RH by Grupo Castilla. This vulnerability allows an attacker to retrieve, create, update and delete database via sending a POST request using the parameter ‘sEstadoUsr’ in ‘/epsilonnetws/WSAvisos.asmx’.

Affected (CNA)

Vendor / productVersions
Grupo Castilla / Epsilon RHaffected 3.03.36.010

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.