Skip to content
Sign in
6.9 Medium

CVE-2025-10115 A vulnerability was determined in SiempreCMS up to 1.3.6

Description

A vulnerability was determined in SiempreCMS up to 1.3.6. This affects an unknown part of the file user_search_ajax.php. This manipulation of the argument name/userName causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Affected products and versions

Product Affected versions Fixed in
SiempreCMS 1.3 1.3.0 → 1.3.6 No fix stated

Other CVEs of SiempreCMS

The 2 CVEs of SiempreCMS →
CVE-2025-10116 A vulnerability was identified in SiempreCMS up to 1.3.6 6.9 Medium
Track this CVE