VULNERABILITY INTELLIGENCE
CVE-2025-12462
EPSS probability0.51%
CISA KEVNot currently listed
Published2026-03-02
Last modified2026-06-17
Description
A Blind SQL injection vulnerability has been identified in DobryCMS. A remote unauthenticated attacker is able to inject SQL syntax into URL path in multiple parameters resulting in Blind SQL Injection. This issue was fixed in versions above 8.0.
Weakness classification
- cvd@cert.pl: CWE-89