DM Corporative CMS SQL Injection Vulnerability
Vulnerability
A SQL injection vulnerability exists in DM Corporative CMS versions prior to 2025.01. This vulnerability allows attackers to retrieve, create, update, and delete databases via the 'cod' parameter in '/administer/node-selection/data.asp'.
Impact
Exploitation of this vulnerability allows for SQL injection, enabling attackers to manipulate the database in various ways, such as retrieving, creating, updating, and deleting database records.
Remediation
Users can upgrade to DM Corporative CMS version 2025.01 to address this vulnerability.
Added: Sep 1, 2025, 7:22 PM
Updated: Sep 1, 2025, 7:22 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
5.0exploitability
7.4remediation
7.7relevance
0.2threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.