CVE-2025-15373
A security vulnerability has been detected in EyouCMS up to 1.7.7. Impacted is the function saveRemote of the file application/function.php. Such manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor is "[a]cknowledging the existence of the vulnerability, we have completed the fix and will release a new version, v1.7.8".
Vendor
Product
CWE
Yayın Tarihi
2025-12-31 04:15:53
Güncelleme
2026-01-02 15:15:58
Source Identifier
cna@vuldb.com
KEV Date Added
-
Kategoriler
Referanslar
https://note-hxlab.wetolink.com/share/DeUFyoSjsPPK
https://note-hxlab.wetolink.com/share/DeUFyoSjsPPK#-span--strong-proof-of-concept---strong---span-
https://vuldb.com/?ctiid.339081
https://vuldb.com/?id.339081
https://vuldb.com/?submit.718465
https://note-hxlab.wetolink.com/share/DeUFyoSjsPPK
https://note-hxlab.wetolink.com/share/DeUFyoSjsPPK#-span--strong-proof-of-concept---strong---span-