An arbitrary file upload vulnerability in the component /file/savefile.do of MRCMS v3.1.2 allows attackers to execute arbitrary code via uploading a crafted .jsp file.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://flowus.cn/share/7097c747-ae3e-4cef-a198-285863698607 | Exploit |
Configurations
History
28 Mar 2025, 18:46
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://flowus.cn/share/7097c747-ae3e-4cef-a198-285863698607 - Exploit | |
| CPE | cpe:2.3:a:mrcms:mrcms:3.1.2:*:*:*:*:*:*:* | |
| First Time |
Mrcms mrcms
Mrcms |
21 Feb 2025, 18:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-21 18:16
Updated : 2025-03-28 18:46
NVD link : CVE-2025-25766
Mitre link : CVE-2025-25766
JSON object : View
Products Affected
mrcms
- mrcms
CWE
No CWE.