← Database

CVE-2025-11252

CRITICAL CVSS: 9.8 Published: 2026-02-27 Modified: 2026-06-17

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Signum Technology Promotion and Training Inc. Windesk.Fm allows SQL Injection. This issue affects windesk.Fm: before v2.3.4.  NOTE:  The vendor patched the vulnerability after the CVE was published.

Affected Platforms

Signumtte Windesk.Fm

Weakness Type

CWE-89

References