Informatica Del Este Winplus
5 CVEs affecting Informatica Del Este Winplus. Latest disclosed: 2025-11-18. Critical: 3, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-41348 | Critical | 9.8 | 2025-11-18 | SQL injection vulnerability in WinPlus v24.11.27 by Informática del Este. This vulnerability allows an attacker recover, create, update an delete databases by… |
CVE-2025-41347 | Critical | 9.8 | 2025-11-18 | Unlimited upload vulnerability for dangerous file types in WinPlus v24.11.27 from Informática del Este. This vulnerability allows an attacker to upload a 'web… |
CVE-2025-41346 | Critical | 9.8 | 2025-11-18 | Faulty authorization control in software WinPlus v24.11.27 by Informática del Este that allows another user to be impersonated simply by knowing their 'numeric… |
CVE-2025-41350 | Medium | 5.4 | 2025-11-18 | Stored Cross-site Scripting (XSS)vylnerability type in WinPlus v24.11.27 byInformática del Este that consist of an stored XSS of a stored XSS due to a lack of… |
CVE-2025-41349 | Medium | 5.4 | 2025-11-18 | Stored Cross-site Scripting (XSS)vylnerability type in WinPlus v24.11.27 byInformática del Este that consist of an stored XSS of a stored XSS due to a lack of… |