QwikSec

Security Database

CVE

CWE

Training

CVE-2025-41029

Published: Apr 21, 2026

Modified: Apr 21, 2026

PUBLISHED

Description

SQL injection vulnerability in Zeon Academy Pro by Zeon Global Tech. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a POST request using the parameter 'phonenumber' in '/private/continue-upload.php'.

Vendor	Product	Versions
Zeon Global Tech	Zeon Academy Pro	affected `0 - < *`

Weaknesses (CWE)

References

https://www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-zeon-academy-pro-zeon-global-tech

patch

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.