SQL Injection in Studio Fabryka Dobrycms
CVE-2025-12462
A Blind SQL injection vulnerability has been identified in DobryCMS. A remote unauthenticated attacker is able to inject SQL syntax into URL path in multiple parameters resulting in Blind SQL Injection. This issue was fixed in versions above 8.0.
Vulnerability class: SQL Injection
EPSS: 0.004 (36.7th percentile) — read the EPSS interpretation.
Affected products
- Studio Fabryka Dobrycms — versions 0