CVE-2025-40666 Time-based blind SQL injection vulnerability in TCMAN GIM v11

Time-based blind SQL injection vulnerabilities in TCMAN's GIM v11. These allow an attacker to retrieve, create, update and delete databases through ArbolID parameter in/GIMWeb/PC/frmPreventivosList.aspx...

CVE-2025-40666

CVE-2025-40666 affects TCMAN GIM v11. The vulnerability arises from time-based blind SQL injection via the ArbolID parameter in /GIMWeb/PC/frmPreventivosList.aspx, allowing an attacker to retrieve, create, update, and delete databases as described across multiple sources. Impact is high (confiden...