← Back to CVEs
CVE-2025-41006
N/ADescription
Imaster's MEMS Events CRM contains an SQL injection vulnerability in ‘phone’ parameter in ‘/memsdemo/login.php’.
CVE Details
CVSS v3.1 ScoreN/A
Published1/12/2026
Last Modified1/13/2026
Sourcenvd
Honeypot Sightings0
Weaknesses (CWE)
CWE-89
References
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-imaster-products(cve-coordination@incibe.es)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.