CVE-2025-8536

CriticalCVSS 9.3

Published: 24/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

21th percentile - higher than 21% of all known CVEs

Summary

A SQL injection vulnerability has been identified in DobryCMS. Improper neutralization of user input in the language functionality allows SQL Injection attacks. This affects older branches of the software.

Risk Assessment

An attacker could gain unauthorized access to the database, steal or modify data, and potentially take full control of the system.

Recommendation

Update DobryCMS to the latest available version or apply security patches. Additionally, validate and sanitize all user input.

Other vulnerabilities in DobryCMS

CVE-2025-12462Critical
A Blind SQL injection vulnerability has been identified in DobryCMS. A remote unauthenticated attacker can inject SQL syntax into URL path in multiple parameters resulting in Blind SQL Injection. This issue was fixed in versions above 8.0.

Original NVD description (English source)

A SQL injection vulnerability has been identified in DobryCMS. Improper neutralization of input provided by user into language functionality allows for SQL Injection attacks. This issue affects older branches of this software.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS