Volerion logoVolerion
Volerion logoVolerion

Prevengos SQL Injection Vulnerability Allowing Database Manipulation

Vulnerability

A SQL injection vulnerability has been identified in Prevengos version 2.44, developed by Nedatec Consulting. This vulnerability enables an attacker to retrieve, create, update, and delete databases. Exploitation involves sending a POST request with the parameters 'mpsCentroin', 'mpsEmpresa', 'mpsProyecto', and 'mpsContrata' to the endpoint '/servicios/autorizaciones.asmx/mfsRecuperarListado'.

Impact

Successful exploitation allows for unauthorized database access and manipulation, including retrieval, creation, updating, and deletion of database records.

Remediation

Users can upgrade to Prevengos version 2.48, released on November 18, 2024, to address this vulnerability.

Added: Sep 25, 2025, 12:16 PM
Updated: Sep 25, 2025, 12:16 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
5.0
exploitability
5.2
remediation
7.7
relevance
0.6
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.