CVE-2025-40656

A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the cod parameter in /administer/node-selection/data.asp...

CVE-2025-40656

CVE-2025-40656 describes a SQL injection in DM Corporative CMS, exploitable via the cod parameter in /administer/node-selection/data.asp, allowing retrieval, creation, modification and deletion of backend data. Root cause stated as lack of validation of externally entered SQL statements in cod. D...

CVE-2025-40656: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the cod parameter in /administer/node-selection/data.asp...

CVE-2025-40660: Authorization Bypass Through User-Controlled Key

An Insecure Direct Object Reference IDOR vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/select node/data.asp?mode=catalogue&id1=1&id2=1session=&cod=1&networks=0...

Flash cms \module\html\h001\data.asp page SQL injection vulnerability

Flash Flash cms is Zibo Flash Network Technology Co., Ltd. developed a corporate website system. A SQL injection vulnerability exists in the Flash cms \module\html\h001\data.asp page. The vulnerability stems from the program's failure to filter the data submitted by the user. An attacker can...