← Database

CVE-2025-28009

CRITICAL CVSS: 9.8 Published: 2025-04-17 Modified: 2026-06-17

Description

A SQL Injection vulnerability exists in the `u` parameter of the progress-body-weight.php endpoint of Dietiqa App v1.0.20.

Affected Platforms

Appventure Dietiqa

Weakness Type

CWE-89

References