CVE-2025-6169

The WIMP website co-construction management platform from HAMASTAR Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...

CVE-2025-6169 HAMASTAR Technology WIMP website co-construction management platform - SQL Injection

The WIMP website co-construction management platform from HAMASTAR Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...

PT-2025-25533

Name of the Vulnerable Software and Affected Versions Customer Support System version 1.0 Description This issue allows an authenticated attacker to retrieve, create, update, and delete databases via the id parameter in the "/customer support/manage user.php" endpoint. Recommendations For Custome...

Customer Support System SQL注入漏洞

Customer Support System is a customer support system by oretnom23 Individual Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. Customer Support System v1.0 version suffers from a SQL injection vulnerability, which...

CVE-2025-40654

A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the name and cod parameters in /antbuspre.asp...

CVE-2025-40655

A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the name parameter in /antcatalogue.asp...

CVE-2025-40656

A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the cod parameter in /administer/node-selection/data.asp...

CVE-2025-40657

A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the codform parameter in /modules/forms/collectform.asp...

CVE-2025-40657

A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the codform parameter in /modules/forms/collectform.asp...

CVE-2025-40656

A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the cod parameter in /administer/node-selection/data.asp...

CVE-2025-40654

A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the name and cod parameters in /antbuspre.asp...

CVE-2025-40657 SQL injection vulnerability in DM Corporative CMS

A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the codform parameter in /modules/forms/collectform.asp...

CVE-2025-40657

CVE-2025-40657 concerns a SQL injection in DM Corporative CMS. The vulnerability stems from lack of validation of externally supplied SQL in the codform parameter of the /modules/forms/collectform.asp endpoint, enabling an attacker to view, add, modify, or delete data in the backend database. Mul...

CVE-2025-40657 SQL injection vulnerability in DM Corporative CMS

A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the codform parameter in /modules/forms/collectform.asp...

CVE-2025-40656 SQL injection vulnerability in DM Corporative CMS

A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the cod parameter in /administer/node-selection/data.asp...

CVE-2025-40656

CVE-2025-40656 describes a SQL injection in DM Corporative CMS, exploitable via the cod parameter in /administer/node-selection/data.asp, allowing retrieval, creation, modification and deletion of backend data. Root cause stated as lack of validation of externally entered SQL statements in cod. D...

CVE-2025-40655 SQL injection vulnerability in DM Corporative CMS

A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the name parameter in /antcatalogue.asp...

CVE-2025-40655 SQL injection vulnerability in DM Corporative CMS

A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the name parameter in /antcatalogue.asp...

CVE-2025-40654 SQL injection vulnerability in DM Corporative CMS

A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the name and cod parameters in /antbuspre.asp...

CVE-2025-40654

DM Corporative CMS exposes a SQL injection via the name and cod parameters in /antbuspre.asp, enabling retrieval/creation/modification/deletion of backend data. Affected software: Dmacroweb DM Corporative CMS. Root cause: insufficient input validation leading to unauthenticated network exploit. I...