CVE-2025-13792
Qualitor getResumo.php eval code injection
CVSS Score
7.3
EPSS Score
0.0%
EPSS Percentile
0th
A security flaw has been discovered in Qualitor up to 8.20.104/8.24.97. Affected by this vulnerability is the function eval of the file /html/st/stdeslocamento/request/getResumo.php. Performing a manipulation of the argument passageiros results in code injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. Upgrading to version 8.20.105 and 8.24.98 addresses this issue. Upgrading the affected component is advised.
| CWE | CWE-94 CWE-74 |
| Vendor | n/a |
| Product | qualitor |
| Published | Nov 30, 2025 |
| Last Updated | Feb 24, 2026 |
Stay Ahead of the Next One
Get instant alerts for n/a qualitor
Be the first to know when new high vulnerabilities affecting n/a qualitor are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
n/a / Qualitor
8.20.104 8.24.0 8.24.1 8.24.2 8.24.3 8.24.4 8.24.5 8.24.6 8.24.7 8.24.8 8.24.9 8.24.10 8.24.11 8.24.12 8.24.13 8.24.14 8.24.15 8.24.16 8.24.17 8.24.18 8.24.19 8.24.20 8.24.21 8.24.22 8.24.23 8.24.24 8.24.25 8.24.26 8.24.27 8.24.28 8.24.29 8.24.30 8.24.31 8.24.32 8.24.33 8.24.34 8.24.35 8.24.36 8.24.37 8.24.38 8.24.39 8.24.40 8.24.41 8.24.42 8.24.43 8.24.44 8.24.45 8.24.46 8.24.47 8.24.48 8.24.49 8.24.50 8.24.51 8.24.52 8.24.53 8.24.54 8.24.55 8.24.56 8.24.57 8.24.58 8.24.59 8.24.60 8.24.61 8.24.62 8.24.63 8.24.64 8.24.65 8.24.66 8.24.67 8.24.68 8.24.69 8.24.70 8.24.71 8.24.72 8.24.73 8.24.74 8.24.75 8.24.76 8.24.77 8.24.78 8.24.79 8.24.80 8.24.81 8.24.82 8.24.83 8.24.84 8.24.85 8.24.86 8.24.87 8.24.88 8.24.89 8.24.90 8.24.91 8.24.92 8.24.93 8.24.94 8.24.95 8.24.96 8.24.97
References
vuldb.com: https://vuldb.com/?id.333796 vuldb.com: https://vuldb.com/?ctiid.333796 vuldb.com: https://vuldb.com/?submit.691251 vuldb.com: https://vuldb.com/?submit.704314 youtube.com: https://www.youtube.com/watch?v=hU8YbFc6KpI qualitor.com.br: https://www.qualitor.com.br/official-security-advisory-cve-2025-13792
Credits
🔍 mtzsec (VulDB User) 🔍 Dante Michelon (VulDB User)