CVE-2025-41032 — SQL injection vulnerability in appRain CMF

CVE-2025-41032

SQL injection vulnerability in appRain CMF PUBLISHED

Description (CNA)

An SQL injection vulnerability has been found in appRain CMF 4.0.5. This vulnerability allows an attacker to retrieve, create, update, and delete the database, through the 'data%5BAdmin%5D%5Busername%5D' parameter in /apprain/admin/manage/add/.

Affected (CNA)

Vendor / product	Versions
appRain / appRain CMF	affected 4.0.5

CWE

CWE-89

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-apprain-cmf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.