CVE-2025-12462

Critical

Published: 02/03/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

A Blind SQL injection vulnerability has been identified in DobryCMS. A remote unauthenticated attacker can inject SQL syntax into URL path in multiple parameters resulting in Blind SQL Injection. This issue was fixed in versions above 8.0.

Risk Assessment

The risk involves potential unauthorized access to the database, which could lead to data leakage, modification, or deletion in the CMS system.

Recommendation

It is recommended to update DobryCMS to a version above 8.0 where the vulnerability is fixed.

Original NVD description (English source)

A Blind SQL injection vulnerability has been identified in DobryCMS. A remote unauthenticated attacker is able to inject SQL syntax into URL path in multiple parameters resulting in Blind SQL Injection. This issue was fixed in versions above 8.0.