CVEvulnerability

CVE-2025-56699

5.4 MEDIUM Published 2025-10-16 Modified 2026-06-17 Official page ↗

Status: Deferred
Published: 2025-10-16
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Weaknesses: CWE-89

Description

SQL injection vulnerability in the cmd component of Base Digitale Group spa product Centrax Open PSIM version 6.1 allows an unauthenticated user to execute arbitrary SQL commands via the sender parameter.

Weakness · CWE (1)

CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References

https://basedigitale.com/integrated-security-solutions/security-asset-management/centrax/ basedigitale.com
https://github.com/MarioTesoro/vulnerability-research/tree/main/CVE-2025-56699 github.com

CVE-2025-56699

Description

Related

Weakness · CWE (1)

References