CVE-2025-40656

CVE-2025-40656 describes a SQL injection in DM Corporative CMS, exploitable via the cod parameter in /administer/node-selection/data.asp, allowing retrieval, creation, modification and deletion of backend data. Root cause stated as lack of validation of externally entered SQL statements in cod. D...