CVE-2024-27574: Trainme Acadamy Ichin

Critical severity, CVSS 9.1. EPSS: 0.6% chance of exploitation in the next 30 days.

SQL Injection vulnerability in Trainme Academy version Ichin v.1.3.2 allows a remote attacker to obtain sensitive information via the informacion, idcurso, and tit parameters.

Affected products

• Trainme Acadamy Ichin: version 1.3.2 only

Published 2024-04-22. Last modified 2026-06-17.