CVE-2025-56700

Summary

Boolean SQL injection vulnerability in the web app of Base Digitale Group spa product Centrax Open PSIM version 6.1 allows a low level priviliged user that has access to the platform, to execute arbitrary SQL commands via the datafine parameter.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

References

• https://basedigitale.com/integrated-security-solutions/security-asset-management/centrax/
• https://github.com/MarioTesoro/vulnerability-research/tree/main/CVE-2025-56700

• ←Previous
• Next→