critical9.8
CVE-2025-41032
An SQL injection vulnerability has been found in appRain CMF 4.0.5.
Impact
An SQL injection vulnerability has been found in appRain CMF 4.0.5. This vulnerability allows an attacker to retrieve, create, update, and delete the database, through the 'data%5BAdmin%5D%5Busername%5D' parameter in /apprain/admin/manage/add/.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apprain | Apprain | Version 4.0.5 |