CVE-2025-40639 - SQL injection in Eventobot

CVE-2025-40639 - SQL injection in Eventobot

CVE ID :CVE-2025-40639 Published : March 9, 2026, 10:16 a.m. | 2 hours, 11 minutes ago Description :A SQL injection vulnerability has been found in Eventobot. This vulnerability allows an attacker to retrieve, create, update and delete databases through the 'promo_send' parameter in the '/assets/php/calculate_discount.php'. Severity: 8.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
HIGH
Published
March 9, 2026
Affected Product: php
Impact: SQL injection