CVE-2025-40654

DM Corporative CMS exposes a SQL injection via the name and cod parameters in /antbuspre.asp, enabling retrieval/creation/modification/deletion of backend data. Affected software: Dmacroweb DM Corporative CMS. Root cause: insufficient input validation leading to unauthenticated network exploit. I...