CVE-2025-40654

DM Corporative CMS exposes a SQL injection via the name and cod parameters in /antbuspre.asp, enabling retrieval/creation/modification/deletion of backend data. Affected software: Dmacroweb DM Corporative CMS. Root cause: insufficient input validation leading to unauthenticated network exploit. I...

CVE-2025-40654: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the name and cod parameters in /antbuspre.asp...