What’s Vulnerable › Vulnerabilities
CVE-2025-40661: Insecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMS
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-06-10 · updated 2026-06-17
- Weakness: CWE-639
Description
An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/selectionnode/selection.asp.
Affected products
- Dmacroweb DM Corporative CMS: before 2025.01 — fixed in 2025.01
How to fix
Upgrade to a fixed version: Dmacroweb DM Corporative CMS 2025.01. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2025-40661 or the next vulnerability affects your stack