Vulnerability Database

309,364

Total vulnerabilities in the database

CVE-2025-40661

An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/selectionnode/selection.asp.

  • Published: Jun 10, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-40661
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
acc / dm_corporative_cms - 2025.01