CVE-2025-40671 — SQL injection vulnerability in AES Multimedia's Gestnet

CVE-2025-40671

SQL injection vulnerability in AES Multimedia's Gestnet PUBLISHED

Description (CNA)

SQL injection vulnerability in AES Multimedia's Gestnet v1.07. This vulnerability allows an attacker to retrieve, create, update and delete databases via the ‘fk_remoto_central’ parameter on the ‘/webservices/articles.php’ endpoint.

Affected (CNA)

Vendor / product	Versions
AES Multimedia / Gestnet	affected 1.07

CWE

CWE-93

References

https://www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-vulnerability-aes-multimedias-gestnet

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.