CVE-2025-25784 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An arbitrary file upload vulnerability in the component \c\TemplateController.php of Jizhicms v2.5.4 allows attackers to execute arbitrary code via uploading a…
Critical CVSS: 9.8

CVE-2025-25784

An arbitrary file upload vulnerability in the component \c\TemplateController.php of Jizhicms v2.5.4 allows attackers to execute arbitrary code via uploading a crafted Zip file.
Vendor
Jizhicms
Product
Jizhicms
CWE
CWE-434
Yayın Tarihi
2025-02-26 15:15:26
Güncelleme
2025-04-10 17:42:20
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-434 Jizhicms CRITICAL Jizhicms 2025

Referanslar

http://jizhicms.com https://github.com/Ka7arotto/JizhiCms/blob/main/jizhicms.md https://www.jizhicms.cn/ https://github.com/Ka7arotto/JizhiCms/blob/main/jizhicms.md