high7.5
CVE-2025-40660
An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS.
Impact
An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/select node/data.asp?mode=catalogue&id1=1&id2=1session=&cod=1&networks=0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Acc | Dm Corporative Cms | before 2025.01 |