CVE-2018-25191 - Facturation System 1.0 SQL Injection via editar_producto.php

CVE ID : CVE-2018-25191 Published : March 6, 2026, 12:19 p.m. | 39 minutes ago Description : Facturation System 1.0 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'mod_id' parameter. Attackers can send POST requests to the editar_producto.php endpoint with crafted SQL payloads in the mod_id parameter to extract sensitive database information including usernames, database names, and version details. Severity: 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...