CVE-2025-5243 in Information Portalinformação

Sumário

de MITRE • 24/07/2025

Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SMG Software Information Portal allows Code Injection, Upload a Web Shell to a Web Server, Code Inclusion.

This issue affects Information Portal: before 13.06.2025.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Responsável

TR-CERT

Reservar

27/05/2025

Divulgação

24/07/2025

Moderação

aceite

Entrada

VDB-317496

CPE

pronto

EPSS

0.01548

KEV

não

Atividades

muito baixo

Fontes

Do you need the next level of professionalism?

Upgrade your account now!