← voltar
CVE-2025-8536

SQL Injection in DobryCMS

CVSS 9.3 CRITICALEPSS 0.3%CWE-89
Vexday Risk Score
28Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 9.3EPSS 0.3%KEV nãoPoC Nuclei Metasploit Patch
Ciclo de vida
24 out 2025Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
A SQL injection vulnerability has been identified in DobryCMS. Improper neutralization of input provided by user into language functionality allows for SQL Injection attacks. This issue affects older branches of this software.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N