beardenx/CVE-2025-28009

beardenx/CVE-2025-28009

GitHubGitHub
GitHubgithub.com
Releases0
SQL Injection in Dietiqa App v1.0.20 (CVE-2025-28009) – Unauthenticated remote data access via vulnerable parameter.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-28009↗
9.8 CRITICAL—

A SQL Injection vulnerability exists in the `u` parameter of the progress-body-weight.php endpoint of Dietiqa App v1.0.20.