SQL Injection vulnerability in Trainme Academy version Ichin v.1.3.2 allows a remote attacker to obtain sensitive information via the informacion, idcurso, and tit parameters.
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')