CVE-2025-41029 — SQL injection in Zeon Academy Pro by Zeon Global Tech

CVE-2025-41029

SQL injection in Zeon Academy Pro by Zeon Global Tech PUBLISHED

Description (CNA)

SQL injection vulnerability in Zeon Academy Pro by Zeon Global Tech. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a POST request using the parameter 'phonenumber' in '/private/continue-upload.php'.

Affected (CNA)

Vendor / product	Versions
Zeon Global Tech / Zeon Academy Pro	affected 0 before *

CWE

CWE-89

References

https://www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-zeon-academy-pro-zeon-global-tech

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.