Paper/Archive/CVE-2025-8536

CVE-2025-8536

Studio Fabryka DobryCMS — SQL Injection in DobryCMS

CVSS 9.3 (CNA)9.3 / 10 × 3027.9 Not in CISA KEV+300.0 EPSS percentile 22.9.229 × 204.6 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A SQL injection vulnerability has been identified in DobryCMS. Improper neutralization of input provided by user into language functionality allows for SQL Injection attacks. This issue affects older branches of this software.

Affected

ProductAffectedFixed inSource

DobryCMS< 3.03.0CNA

Scores by source

CERT-PL (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

writeupcert.pl/posts/2025/10/CVE-2025-8536 refstudiofabryka.pl/systemy_cms.html