DIAL CentrosNet SQL Injection Vulnerability
Vulnerability
A SQL injection vulnerability exists in DIAL's CentrosNet version 2.64. This vulnerability allows attackers to retrieve, create, update, and delete databases by sending POST and GET requests with the 'ultralogin' parameter to '/centrosnet/ultralogin.php'.
Impact
Exploitation of this vulnerability allows for unauthorized database manipulation, including retrieval, creation, updating, and deletion of database records.
Remediation
The vulnerability has been fixed in DIAL CentrosNet version 2.65.
Added: Nov 7, 2025, 10:17 AM
Updated: Nov 7, 2025, 10:17 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
5.0exploitability
7.4remediation
7.7relevance
1.0threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.