CVE-2025-40628

SQL Injection in DomainsPRO PUBLISHED

Description (CNA)

SQL injection vulnerability in DomainsPRO 1.2. This vulnerability could allow an attacker to retrieve, create, update and delete databases via the “d” parameter in the “/article.php” endpoint.

Affected (CNA)

Vendor / product	Versions
DomainsPRO / DomainsPRO	affected 1.2

CWE

CWE-89

References

https://www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-domainspro

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.