DM Corporative CMS SQL Injection Vulnerability
Vulnerability
A SQL injection vulnerability exists in DM Corporative CMS versions prior to 2025.01. This vulnerability allows attackers to retrieve, create, update, and delete databases by manipulating the name parameter in the ancatalogue.asp file.
Impact
Exploitation of this vulnerability allows for unauthorized database manipulation, including retrieval, creation, updating, and deletion of database entries.
Remediation
Users can upgrade to DM Corporative CMS version 2025.01 to address this vulnerability.
Added: Sep 1, 2025, 7:22 PM
Updated: Sep 1, 2025, 7:22 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
5.0exploitability
7.4remediation
7.7relevance
0.2threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.