CVE-2025-41013 — SQL injection vulnerability in TCMAN GIM

CVE-2025-41013

SQL injection vulnerability in TCMAN GIM PUBLISHED

Description (CNA)

SQL injection vulnerability in TCMAN GIM v11 in version 20250304. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a GET request using the 'idmant' parameter in '/PC/frmEPIS.aspx'.

Affected (CNA)

Vendor / product	Versions
TCMAN / GIM	affected 0 before 20250304

CWE

CWE-89

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-tcman-gim-2

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.