Dmacroweb vulnerabilities
We track 9 vulnerabilities in Dmacroweb products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on June 10, 2025.
Latest Dmacroweb vulnerabilities
- 7.5 High severity
DM Corporative CMS: Exposure of Sensitive Information to an Unauthorized Actor
Absolute path disclosure vulnerability in DM Corporative CMS. This vulnerability allows an attacker to view the contents of webroot/file, if navigating to a non-existent file.
- 7.5 High severity
DM Corporative CMS: Authorization Bypass Through User-Controlled Key
An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/selectionnode/selection.asp.
- 7.5 High severity
DM Corporative CMS: Authorization Bypass Through User-Controlled Key
An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/select node/data.asp?mode=catalogue&i
- 7.5 High severity
DM Corporative CMS: Authorization Bypass Through User-Controlled Key
An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/selectionnode/framesSelectionNetworks
- 7.5 High severity
DM Corporative CMS: Authorization Bypass Through User-Controlled Key
An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/selectionnode/framesSelection.asp.
- 9.8 Critical severity
DM Corporative CMS: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the codform parameter in /modules/forms/collectform.asp.
- 9.8 Critical severity
DM Corporative CMS: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the cod parameter in /administer/node-selection/data.asp.
- 9.8 Critical severity
DM Corporative CMS: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the name parameter in /antcatalogue.asp.
- 9.8 Critical severity
DM Corporative CMS: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the name and cod parameters in /antbuspre.asp.