Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-40618

SQL injection vulnerability in Bookgy

Description

SQL injection vulnerability in Bookgy. This vulnerability could allow an attacker to retrieve, create, update and delete databases by sending an HTTP request through the "IDRESERVA"  parameter in /bkg_imprimir_comprobante.php

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bookgy Bookgy

Default version status: unaffected

  • all versionsaffected

References