← Database

CVE-2025-40660

HIGH CVSS: 7.5 Published: 2025-06-10 Modified: 2026-06-17

Description

An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/select node/data.asp?mode=catalogue&id1=1&id2=1session=&cod=1&networks=0.

Affected Platforms

Acc Dm Corporative Cms

Weakness Type

CWE-639

References