High severity7.5NVD Advisory· Published Jan 27, 2026· Updated Jun 17, 2026
CVE-2026-1472
CVE-2026-1472
Description
An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'txAny' in '/evaluacion_competencias_autoeval_list.aspx', could allow an attacker to extract sensitive information from the database through external channels, without the affected application returning the data directly, compromising the confidentiality of the stored information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: All versions
- cpe:2.3:a:quatuor:evaluacion_de_desempeno:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.