CVE-2025-6967 | BDVDB-2026-314583 Detail

Description#

Execution After Redirect (EAR) vulnerability in Sarman Soft Software and Technology Services Industry and Trade Ltd. Co. CMS allows JSON Hijacking (aka JavaScript Hijacking), Authentication Bypass. This issue affects CMS: through 10022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-02-10Record published in the CVE List.
2. Version 22026-06-05Most recent update recorded in the CVE List.