CVE-2025-41029CWE-89sql-injection
CVE-2025-41029
published April 21, 2026
What it is
SQL injection vulnerability in Zeon Academy Pro by Zeon Global Tech. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a POST request using the parameter 'phonenumber' in '/private/continue-upload.php'.
The record
Technical detail
- CVSS
- 9.3 · NONE
- CVSS v4.0
- Not supplied
- EPSS
- 0.00238 · 14.0th percentile
- Weakness
- CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
- Published
- 2026-04-21T20:16Z
References (1)
EPSS history
Timeline