VULNERABILITY INTELLIGENCE
CVE-2025-41029
EPSS probability0.24%
CISA KEVNot currently listed
Published2026-04-21
Last modified2026-10-07
Description
SQL injection vulnerability in Zeon Academy Pro by Zeon Global Tech. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a POST request using the parameter 'phonenumber' in '/private/continue-upload.php'.
Weakness classification
- cve-coordination@incibe.es: CWE-89