CVE-2017-15381

SQL Injection exists in E-Sic 1.0 via the f parameter to the zip code search script (buscacep.php).

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to the disclosure of sensitive information.

It is recommended to update to the latest version of E-Sic and implement input filtering and validation in the application.