Vulnerability in Aes Multimedia Gestnet
CVE-2025-40671
SQL injection vulnerability in AES Multimedia's Gestnet v1.07. This vulnerability allows an attacker to retrieve, create, update and delete databases via the ‘fk_remoto_central’ parameter on the ‘/webservices/articles.php’ endpoint.
Vulnerability class: CRLF Injection
EPSS: 0.004 (28.4th percentile) — read the EPSS interpretation.
Affected products
- Aes Multimedia Gestnet — versions 1.07