CVE-2025-41028 – SQL injection in Epsilon RH

CVE ID : CVE-2025-41028

Published : 20. Oktober 2025 09:15 | 1 Stunde, 26 Minuten ago

Description : A SQL Injection vulnerability has been found in Epsilon RH by Grupo Castilla. This vulnerability allows an attacker to retrieve, create, update and delete database via sending a POST request using the parameter ‘sEstadoUsr’ in ‘/epsilonnetws/WSAvisos.asmx’.

Severity: 9.3 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…