CVE-2025-40677

published 2025-09-18

CVE-2025-40677: SQL injection vulnerability in Summar Software´s Portal del Empleado. This vulnerability allows an attacker to retrieve, create, update, and delete the…

Priority P2 64 high 8.7 CVSS 4.0

AV N AC L AT N PR L UI N VC H VI H VA H SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

EXPLOIT

SQL injection vulnerability in Summar Software´s Portal del Empleado. This vulnerability allows an attacker to retrieve, create, update, and delete the database by sending a POST request using the parameter “ctl00$ContentPlaceHolder1$filtroNombre” in “/MemberPages/quienesquien.aspx”.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
summar_software	portal_del_empleado	—	—

Detection & IOCs extracted from sources · hover to see the quote

command sqlmap --random-agent -r req.sqli.xml -p 'ctl00%24ContentPlaceHolder1%24filtroNombre' --dbms="MSSQL"↗

• → Look for the presence of X-Microsoftajax: Delta=true and X-Requested-With: XMLHttpRequest headers in POST requests to the vulnerable endpoint, which characterise the exploit's request pattern. ↗
• → Detect POST bodies to /MemberPages/quienesquien.aspx containing __ASYNCPOST=true alongside a non-empty or anomalous ctl00%24ContentPlaceHolder1%24filtroNombre value, which is the injection point. ↗
• → Use the Google Dork 'inurl:"/MemberPages/quienesquien.aspx"' to identify exposed instances of the vulnerable Summar Employee Portal. ↗
• → The backend DBMS is MSSQL; correlate suspicious POST activity to /MemberPages/quienesquien.aspx with MSSQL error messages or time-delay anomalies indicative of blind SQLi. ↗

• · Exploitation requires prior authentication to the portal; unauthenticated access alone is insufficient to trigger the SQL injection. ↗
• · The vulnerability affects versions below 3.98.0; instances already patched to 3.98.0 or above are not affected. ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-89