VULNERABILITY INTELLIGENCE

CVE-2025-40628

EPSS probability0.36%
CISA KEVNot currently listed
Published2025-05-13
Last modified2026-06-17

Description

SQL injection vulnerability in DomainsPRO 1.2. This vulnerability could allow an attacker to retrieve, create, update and delete databases via the “d” parameter in the “/article.php” endpoint.

Weakness classification

  • cve-coordination@incibe.es: CWE-89

Primary references