CVE-2025-40671

SQL injection vulnerability in AES Multimedia's Gestnet v1.07. This vulnerability allows an attacker to retrieve, create, update and delete databases via the ‘fkremotocentral’ parameter on the ‘/webservices/articles.php’ endpoint...

CVE-2025-40671

Gestnet v1.07 by AES Multimedia has an SQL injection vulnerability exposed via the fk_remoto_central parameter on the /webservices/articles.php endpoint. Exploitation could allow an attacker to retrieve, create, update, and delete databases, indicating high impact on confidentiality, integrity, a...

CVE-2025-40671 SQL injection vulnerability in AES Multimedia's Gestnet

SQL injection vulnerability in AES Multimedia's Gestnet v1.07. This vulnerability allows an attacker to retrieve, create, update and delete databases via the ‘fkremotocentral’ parameter on the ‘/webservices/articles.php’ endpoint...