Zend.To up to 6.10-6 Beta NSSDropoff.php exec file_1 os command injection

Summaryinfo

A vulnerability identified as critical has been detected in Zend.To up to 6.10-6 Beta. Impacted is the function exec of the file NSSDropoff.php. The manipulation of the argument file_1 leads to os command injection. This vulnerability is traded as CVE-2025-5952. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. You should upgrade the affected component. This affects a rather old version of the software. The vendor recommends updating to the latest release. Additional countermeasures have been added in 6.15-8.

Detailsinfo

A vulnerability, which was classified as critical, has been found in Zend.To up to 6.10-6 Beta. This issue affects the function exec of the file NSSDropoff.php. The manipulation of the argument file_1 with an unknown input leads to a os command injection vulnerability. Using CWE to declare the problem leads to CWE-78. The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component. Impacted is confidentiality, integrity, and availability.

The advisory is shared at matheuscezar.github.io. The identification of this vulnerability is CVE-2025-5952. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Technical details as well as a public exploit are known. MITRE ATT&CK project uses the attack technique T1202 for this issue.

The exploit is available at matheuscezar.github.io. It is declared as proof-of-concept. This affects a rather old version of the software. The vendor recommends updating to the latest release. Additional countermeasures have been added in 6.15-8. By approaching the search of inurl:NSSDropoff.php it is possible to find vulnerable targets with Google Hacking.

Upgrading to version 6.10-7 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-17626). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Name

• Zend.To

Version

• 6.10-6 Beta

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #589178: Zend.To Zend.to Before6.10-7 Beta Code Injection (by pnshbr)

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion