A vulnerability was found in Fanli2012 native-php-cms 1.0. It has been classified as problematic. Affected is an unknown function of the file /fladmin/sysconfig_doedit.php. The manipulation of the argument info leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://github.com/Fanli2012/native-php-cms/issues/7 | Exploit Issue Tracking |
| https://github.com/Fanli2012/native-php-cms/issues/7#issue-2769919832 | Exploit Issue Tracking |
| https://vuldb.com/?ctiid.291930 | Permissions Required VDB Entry |
| https://vuldb.com/?id.291930 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.475247 | Third Party Advisory VDB Entry |
Configurations
History
27 Feb 2025, 02:05
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://vuldb.com/?submit.475247 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?ctiid.291930 - Permissions Required, VDB Entry | |
| References | () https://github.com/Fanli2012/native-php-cms/issues/7#issue-2769919832 - Exploit, Issue Tracking | |
| References | () https://github.com/Fanli2012/native-php-cms/issues/7 - Exploit, Issue Tracking | |
| References | () https://vuldb.com/?id.291930 - Third Party Advisory, VDB Entry | |
| CPE | cpe:2.3:a:fanli2012:native-php-cms:1.0:*:*:*:*:*:*:* | |
| CWE | ||
| First Time |
Fanli2012 native-php-cms
Fanli2012 |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
15 Jan 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-01-15 20:15
Updated : 2025-02-27 02:05
NVD link : CVE-2025-0485
Mitre link : CVE-2025-0485
JSON object : View
Products Affected
fanli2012
- native-php-cms
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')