Input Validation Flaw in Qualifio's Wheel of Fortune

CVE-2025-0615

What is CVE-2025-0615?

An input validation flaw exists in Qualifio's Wheel of Fortune, which can be exploited by an attacker to manipulate the email input. By inserting a '+' symbol, the attacker can gain unauthorized access to the application, allowing them to enter the game repetitively and potentially win prizes multiple times. This vulnerability underscores the importance of secure input handling to prevent abuse and maintain the integrity of promotional games.

References