Approved changes feed: RSS · Atom

cpe:2.3:a:acc:dm_corporative_cms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAcc (34474d72-ecb4-59fa-ab5c-2908978228a0)
ProductDm Corporative Cms (26046515-1dc5-561c-aa9d-5e122b7c41ed)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-40662 vulnerable 2026-06-03 15:01:13.188433 Absolute path disclosure vulnerability in DM Corporative CMS
Absolute path disclosure vulnerability in DM Corporative CMS. This vulnerability allows an attacker to view the contents of webroot/file, if navigating to a non-existent file.
Published: 2025-06-10T10:07:32.257Z
Updated: 2025-06-10T14:30:35.767Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40661 vulnerable 2026-06-03 15:01:13.188107 Insecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMS
An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/selectionnode/selection.asp.
Published: 2025-06-10T10:06:40.672Z
Updated: 2025-06-10T14:33:03.683Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40660 vulnerable 2026-06-03 15:01:13.187677 Insecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMS
An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/select node/data.asp?mode=catalogue&id1=1&id2=1session=&cod=1&networks=0.
Published: 2025-06-10T10:06:27.167Z
Updated: 2025-06-10T14:04:26.591Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40659 vulnerable 2026-06-03 15:01:13.187263 Insecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMS
An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/selectionnode/framesSelectionNetworks.asp.
Published: 2025-06-10T10:06:09.181Z
Updated: 2025-06-10T14:05:38.619Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40658 vulnerable 2026-06-03 15:01:13.186860 Insecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMS
An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/selectionnode/framesSelection.asp.
Published: 2025-06-10T10:05:46.265Z
Updated: 2025-06-10T13:04:47.377Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40657 vulnerable 2026-06-03 15:01:13.186456 SQL injection vulnerability in DM Corporative CMS
A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the codform parameter in /modules/forms/collectform.asp.
Published: 2025-06-10T10:04:09.279Z
Updated: 2025-06-10T19:59:50.416Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40656 vulnerable 2026-06-03 15:01:13.186129 SQL injection vulnerability in DM Corporative CMS
A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the cod parameter in /administer/node-selection/data.asp.
Published: 2025-06-10T10:03:49.029Z
Updated: 2025-06-10T13:06:37.697Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40655 vulnerable 2026-06-03 15:01:13.185701 SQL injection vulnerability in DM Corporative CMS
A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the name parameter in /antcatalogue.asp.
Published: 2025-06-10T10:03:24.120Z
Updated: 2025-06-10T14:13:50.233Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40654 vulnerable 2026-06-03 15:01:13.185258 SQL injection vulnerability in DM Corporative CMS
A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the name and cod parameters in /antbuspre.asp.
Published: 2025-06-10T10:01:14.010Z
Updated: 2025-06-10T14:16:13.950Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.