CVE-2025-4305 in kefaming mayi
要約 (英語)
A vulnerability has been found in kefaming mayi up to 1.3.9 and classified as critical. This vulnerability affects the function Upload of the file app/tools/controller/File.php. The manipulation of the argument File leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
公開
2025年05月06日
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 307408 | kefaming mayi File.php upload 特権昇格 | 434 | 概念実証 | 未定義 | CVE-2025-4305 |