Summar Software Portal del Empleado SQL Injection Vulnerability

A SQL injection vulnerability has been identified in Summar Software's Portal del Empleado, affecting versions prior to 3.98.0. This vulnerability allows attackers to retrieve, create, update, and delete database records. Exploitation involves sending a POST request with the parameter 'ctl00$ContentPlaceHolder1$filtroNombre' to the '/MemberPages/quienesquien.aspx' page.

Impact

Exploitation of this vulnerability allows for full control over the database, including the ability to read, modify, and delete data.

Remediation

Users are advised to update to Summar Software Portal del Empleado version 3.98.0.