Search Results (9 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-40654 1 Acc 1 Dm Corporative Cms 2025-10-23 9.8 Critical
A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the name and cod parameters in /antbuspre.asp.
CVE-2025-40655 1 Acc 1 Dm Corporative Cms 2025-10-23 9.8 Critical
A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the name parameter in /antcatalogue.asp.
CVE-2025-40656 1 Acc 1 Dm Corporative Cms 2025-10-23 9.8 Critical
A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the cod parameter in /administer/node-selection/data.asp.
CVE-2025-40657 1 Acc 1 Dm Corporative Cms 2025-10-22 9.8 Critical
A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the codform parameter in /modules/forms/collectform.asp.
CVE-2025-40658 1 Acc 1 Dm Corporative Cms 2025-10-22 7.5 High
An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/selectionnode/framesSelection.asp.
CVE-2025-40659 1 Acc 1 Dm Corporative Cms 2025-10-22 7.5 High
An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/selectionnode/framesSelectionNetworks.asp.
CVE-2025-40660 1 Acc 1 Dm Corporative Cms 2025-10-22 7.5 High
An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/select node/data.asp?mode=catalogue&id1=1&id2=1session=&cod=1&networks=0.
CVE-2025-40661 1 Acc 1 Dm Corporative Cms 2025-10-22 7.5 High
An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/selectionnode/selection.asp.
CVE-2025-40662 1 Acc 1 Dm Corporative Cms 2025-10-22 7.5 High
Absolute path disclosure vulnerability in DM Corporative CMS. This vulnerability allows an attacker to view the contents of webroot/file, if navigating to a non-existent file.