CVE-2025-40624 | TCMAN GIM 11 updatePassword User/email sql injection

A vulnerability classified as critical was found in TCMAN GIM 11. Affected by this vulnerability is the function updatePassword. The manipulation of the argument User/email leads to sql injection.

This vulnerability is known as CVE-2025-40624. The attack can be launched remotely. There is no exploit available.