SQL Injection in Dial Centrosnet
CVE-2025-10870
SQL injection vulnerability in DIAL's CentrosNet v2.64. Allows an attacker to retrieve, create, update, and delete databases by sending POST and GET requests with the 'ultralogin' parameter in '/centrosnet/ultralogin.php'.
Vulnerability class: SQL Injection
EPSS: 0.003 (19.3th percentile) — read the EPSS interpretation.
Affected products
- Dial Centrosnet — versions prior to 2.65