Skip to content
OpenAdvisories

Vendor

TCMAN

24 known vulnerabilities.

Products

GIM 24
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-40664

    Missing authentication vulnerability in TCMAN GIM v11

    Missing authentication vulnerability in TCMAN GIM v11. This allows an unauthenticated attacker to access the resources /frmGestionUser.aspx/GetData, /frmGestionUser.aspx/updateUser and /frmGestionUser.aspx/DeleteUser.

    TCMAN GIM
  • Critical 9.3
    CVE-2025-40625

    Multiple vulnerabilities in TCMAN's GIM

    Unrestricted file upload in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to upload any file within the server, even a malicious file to obtain a Remote Code Execution (RCE).

    TCMAN GIM
  • Critical 9.3
    CVE-2025-40624

    Multiple vulnerabilities in TCMAN's GIM

    SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information in the database. This vulnerability was found in each of the following parameters according to the …

    TCMAN GIM
  • Critical 9.3
    CVE-2025-40623

    Multiple vulnerabilities in TCMAN's GIM

    SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information in the database. This vulnerability was found in each of the following parameters according to the …

    TCMAN GIM
  • Critical 9.3
    CVE-2025-40622

    Multiple vulnerabilities in TCMAN's GIM

    SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information in the database. This vulnerability was found in each of the following parameters according to the …

    TCMAN GIM
  • Critical 9.3
    CVE-2025-40621

    Multiple vulnerabilities in TCMAN's GIM

    SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information in the database. This vulnerability was found in each of the following parameters according to the …

    TCMAN GIM
  • Critical 9.3
    CVE-2025-40620

    Multiple vulnerabilities in TCMAN's GIM

    SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information in the database. This vulnerability was found in each of the following parameters according to the …

    TCMAN GIM
  • Critical 9.9
    CVE-2022-36276

    SQL injection vulnerability in TCMAN GIM

    TCMAN GIM v8.0.1 is vulnerable to a SQL injection via the 'SqlWhere' parameter inside the function 'BuscarESM'. The exploitation of this vulnerability might allow a remote attacker to directly interact with the database.

    TCMAN GIM
  • Critical 10.0
    CVE-2021-40850

    TCMAN GIM SQL injection vulnerability

    TCMAN GIM is vulnerable to a SQL injection vulnerability inside several available webservice methods in /PC/WebService.asmx.

    TCMAN GIM