SQL injection vulnerability in the Innovación y Cualificación local administration plugin ajax.php
Vulnerability Description
SQL injection vulnerability in the Innovación y Cualificación local administration plugin ajax.php. This vulnerability allows an attacker to obtain, update and delete data from the database by injecting an SQL query in ‘searchActionsToUpdate’, ‘searchSpecialitiesPending’, ‘searchSpecialitiesLinked’, ‘searchUsersToUpdateProfile’, ‘training_action_data’, ‘showContinuingTrainingCourses’ and ‘showUsersToEdit’ in /local/administration/ajax.php.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-2199
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Julen Garrido Estevez
More from Innovación y Cualificación
View All →Affected Vendor
Innovación y Cualificación
View all reports →