EUVD-2026-67010
GHSA-5w9h-62pq-pj3g
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Remote unauthenticated single-parameter SQLi gives AV:N/AC:L/PR:N/UI:N; confidentiality high via data/schema extraction, integrity only low since description shows disclosure not confirmed writes, availability none.
Primary rating from Vendor (INCIBE).
CVSS VectorVendor: INCIBE
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
2DescriptionCVE.org
The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the id_ambito parameter. Unsanitized input is directly incorporated into a MariaDB query, allowing attackers to inject SQL syntax that interrupts the query's execution. The vulnerability results in detailed database error messages and exposes the internal structure of the queries, which could facilitate further exploitation.
AnalysisAI
SQL injection in toools Isquad exposes the '/ws/apiprensa/getVideoNextPrev' endpoint to unauthenticated database manipulation through the unsanitized id_ambito parameter, which is concatenated directly into a MariaDB query. Remote attackers can inject arbitrary SQL syntax to break query execution, trigger verbose database error messages, and enumerate the internal query and schema structure, which facilitates full data extraction. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network reachability to the Isquad application's '/ws/apiprensa/getVideoNextPrev' API endpoint and the ability to supply the id_ambito request parameter - the CVSS vector (AV:N/AC:L/AT:N/PR:N/UI:N) confirms no authentication, no special access requirement, and no user interaction, so this is remote unauthenticated exploitation against the exposed endpoint. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The supplied CVSS 4.0 base score is 9.3 (Critical) with vector AV:N/AC:L/AT:N/PR:N/UI:N and high impact to confidentiality, integrity, and availability - describing a remotely reachable, low-complexity, unauthenticated injection requiring no user interaction, which is the highest-risk profile for a web SQLi. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An unauthenticated attacker sends a single crafted HTTP request to '/ws/apiprensa/getVideoNextPrev' with a malicious id_ambito value (for example appending a UNION or a syntactically broken clause). The server returns detailed MariaDB error messages revealing query structure, which the attacker uses to iteratively map the schema and exfiltrate sensitive records. … |
| Remediation | Apply the vendor-released patch for Isquad; a fix is available per the INCIBE advisory (Patch available per vendor advisory) - consult https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-toools-isquad for the exact patched build, as no explicit fixed version number is provided in the source data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: locate all toools Isquad deployments across production and development environments; obtain the vendor patch from the vendor advisory or INCIBE disclosure. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
SQL injection in toools Isquad lets remote unauthenticated attackers manipulate database queries via the id_seccion para
SQL injection in Toools iSquad exposes the unauthenticated '/ws/apitribuna/setVisita' web-service endpoint, where the id
SQL injection in Toools iSquad's '/ws/apiprensa/getVideoSubcanal' API endpoint lets remote unauthenticated attackers man
SQL injection in Toools Isquad's '/ws/apiprensa/getVideo' endpoint exposes the MariaDB backend to unauthenticated remote
Error-based SQL injection in Toools iSquad's `/ws/apitribuna/ultimosVideos` API endpoint enables unauthenticated remote
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today