CVE-2025-4305 in mayi

Sumário (Inglês)

A vulnerability has been found in kefaming mayi up to 1.3.9 and classified as critical. This vulnerability affects the function Upload of the file app/tools/controller/File.php. The manipulation of the argument File leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Divulgação

06/05/2025

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
307408	kefaming mayi File.php upload Elevação de Privilégios	434	Prova de conceito	Não definido	CVE-2025-4305

Fontes

• MITRE
• NVD
• CVE Details