CVE-2025-41013

Publication date

2025-12-02 13:13:57

Family

INCIBE

State

PUBLISHED

Description

SQL injection vulnerability in TCMAN GIM v11 in version 20250304. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a GET request using the idmant parameter in /PC/frmEPIS.aspx.