CVE-2025-56699

Summary

SQL injection vulnerability in the cmd component of Base Digitale Group spa product Centrax Open PSIM version 6.1 allows an unauthenticated user to execute arbitrary SQL commands via the sender parameter.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

References

• https://basedigitale.com/integrated-security-solutions/security-asset-management/centrax/
• https://github.com/MarioTesoro/vulnerability-research/tree/main/CVE-2025-56699

• ←Previous
• Next→