CVE Feed

    Dashboard / CVE / CVE-2026-1472

    CVE-2026-1472

    An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'txAny' in '/evaluacion_competencias_autoeval_list.aspx', could allow an attacker to extract sensitive information from the database through external channels, without the affected application returning the data directly, compromising the confidentiality of the stored information.

    Published:Jan 27, 2026
    Last Modified:Apr 18, 2026
    EPS:Jan 27, 2026
    EPSS Score:0.00039
    CVSS Score:7.5

    Affected Products

    Vendor
    Quatuor
    Product
    Evaluacion De Desempeno

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-1483 (CVSS 9.3) — An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) ap…
    CVE-2026-1482 (CVSS 9.3) — An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) ap…
    CVE-2026-1481 (CVSS 9.3) — An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) ap…
    CVE-2026-1480 (CVSS 9.3) — An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) ap…
    CVE-2026-1479 (CVSS 9.3) — An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) ap…
    CVE-2026-1478 (CVSS 9.3) — An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) ap…
    CVE-2026-1477 (CVSS 9.3) — An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) ap…
    CVE-2026-1476 (CVSS 9.3) — An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) ap…
    CVE-2026-1475 (CVSS 9.3) — An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) ap…
    CVE-2026-1474 (CVSS 9.3) — An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) ap…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High