DB Electronica Telecomunicazioni Mozart FM Transmitter up to 7000 upgrade_contents.php deleteupgrade file inclusion

Summaryinfo

A vulnerability, which was classified as critical, was found in DB Electronica Telecomunicazioni Mozart FM Transmitter up to 7000. The impacted element is an unknown function of the file upgrade_contents.php. Executing a manipulation of the argument deleteupgrade can lead to file inclusion. This vulnerability appears as CVE-2025-66254. The attack may be performed from remote. There is no available exploit.

Detailsinfo

A vulnerability was found in DB Electronica Telecomunicazioni Mozart FM Transmitter up to 7000. It has been declared as critical. This vulnerability affects some unknown functionality of the file upgrade_contents.php. The manipulation of the argument deleteupgrade with an unknown input leads to a file inclusion vulnerability. The CWE definition for the vulnerability is CWE-73. The product allows user input to control or influence paths or file names that are used in filesystem operations. As an impact it is known to affect integrity, and availability. CVE summarizes:

Unauthenticated Arbitrary File Deletion (upgrade_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform The deleteupgrade parameter allows unauthenticated deletion of arbitrary files.  The `deleteupgrade` parameter in `/var/www/upgrade_contents.php` allows unauthenticated deletion of arbitrary files in `/var/www/upload/` without any extension restriction or path sanitization, enabling attackers to remove critical system files.

The weakness was presented by Abdul Mhanni. The advisory is available at abdulmhsblog.com. This vulnerability was named CVE-2025-66254 since 11/26/2025. The exploitation appears to be easy. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Technical details are known, but there is no available exploit. The structure of the vulnerability defines a possible price range of USD $0-$5k at the moment (estimation calculated on 12/04/2025).

By approaching the search of inurl:upgrade_contents.php it is possible to find vulnerable targets with Google Hacking.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Vendor

• DB Electronica Telecomunicazioni

Name

• Mozart FM Transmitter

Version

• 30
• 50
• 100
• 300
• 500
• 1000
• 2000
• 3000
• 3500
• 6000
• 7000

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion