A vulnerability was found in dazhouda lecms 3.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file admin/view/default/user_set.htm. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://github.com/dtwin88/cve-md/blob/main/lecms%20V3.0.3/lecms_2.md | Exploit |
| https://github.com/dtwin88/cve-md/blob/main/lecms%20V3.0.3/lecms_2.md | Exploit |
| https://vuldb.com/?ctiid.306314 | Permissions Required VDB Entry |
| https://vuldb.com/?id.306314 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.557748 | Third Party Advisory VDB Entry |
Configurations
History
12 May 2025, 19:06
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://vuldb.com/?ctiid.306314 - Permissions Required, VDB Entry | |
| References | () https://github.com/dtwin88/cve-md/blob/main/lecms%20V3.0.3/lecms_2.md - Exploit | |
| References | () https://vuldb.com/?id.306314 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.557748 - Third Party Advisory, VDB Entry | |
| First Time |
Lecms lecms
Lecms |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:a:lecms:lecms:3.0.3:*:*:*:*:*:*:* |
28 Apr 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
| CWE | CWE-200 |
27 Apr 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-27 17:15
Updated : 2025-05-12 19:06
NVD link : CVE-2025-3978
Mitre link : CVE-2025-3978
JSON object : View
Products Affected
lecms
- lecms
CWE