SQL Injection Vulnerability in DM Corporative CMS by DMACROWEB
CVE-2025-40655

9.3CRITICAL

Key Information:

Vendor

Dmacroweb

Status
Dm Corporative Cms
Vendor
CVE Published:
10 June 2025

What is CVE-2025-40655?

A SQL injection vulnerability exists in DM Corporative CMS, enabling attackers to manipulate databases through the 'name' parameter in the /antcatalogue.asp file. This security flaw allows unauthorized database access, potentially compromising data integrity and confidentiality. Organizations using this CMS should assess their systems and implement appropriate security measures.

Affected Version(s)

DM Corporative CMS 0 < 2025.01

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multip...

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Oscar Atienza
.