critical9.8
CVE-2025-28009
A SQL Injection vulnerability exists in the `u` parameter of the progress-body-weight.php endpoint of Dietiqa App v1.0.20.
Impact
A SQL Injection vulnerability exists in the `u` parameter of the progress-body-weight.php endpoint of Dietiqa App v1.0.20.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Appventure | Dietiqa | Version 1.0.20 |