SQL Injection Vulnerability in Econtrata Product by Vendor Unknown

CVE-2025-5172

What is CVE-2025-5172?

A significant SQL injection vulnerability has been identified in Econtrata up to version 20250516. An unspecified function within the file /valida allows attackers to manipulate the 'usuario' argument, enabling unauthorized access and execution of malicious SQL queries. This vulnerability can be exploited remotely, exposing sensitive data and system integrity. Despite early notifications to the vendor, there has been no acknowledgment or response regarding this serious security risk, highlighting the urgency for users to assess their security posture.

References