Volerion logoVolerion
Volerion logoVolerion

TCMAN GIM SQL Injection Vulnerability

Vulnerability

A SQL injection vulnerability has been identified in TCMAN GIM version 11, specifically in the release 20250304. This vulnerability allows attackers to retrieve, create, update, and delete databases by sending a GET request with the 'idmant' parameter to '/PC/frmEPIS.aspx'.

Impact

Exploitation of this vulnerability allows for SQL injection, enabling attackers to manipulate the database in various ways, such as retrieving, creating, updating, and deleting database records.

Remediation

Users can upgrade to TCMAN GIM version 20250401 to address this vulnerability.

Added: Dec 2, 2025, 2:22 PM
Updated: Dec 2, 2025, 5:45 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
5.0
exploitability
3.3
remediation
7.7
relevance
1.2
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.