Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-41029

SQL injection in Zeon Academy Pro by Zeon Global Tech

Description

SQL injection vulnerability in Zeon Academy Pro by Zeon Global Tech. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a POST request using the parameter 'phonenumber' in '/private/continue-upload.php'.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zeon Global Tech Zeon Academy Pro

Default version status: unaffected

  • 0 to < *affected

References