CVE-2025-46080

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-46080
HuoCMS V3.5.1 has a File Upload Vulnerability. An attacker can exploit this flaw to bypass whitelist restrictions and craft malicious files with specific suffixes, thereby gaining control of the server.
CVSS

No CVSS.

References
Link Resource
https://github.com/yggcwhat/CVE-2025-46080/ Exploit Third Party Advisory
https://github.com/yggcwhat/test2/blob/main/README.md Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:huocms:huocms:3.5.1:*:*:*:*:*:*:*
History

04 Jun 2025, 19:59

Type Values Removed Values Added
References () https://github.com/yggcwhat/test2/blob/main/README.md - () https://github.com/yggcwhat/test2/blob/main/README.md - Exploit, Third Party Advisory
References () https://github.com/yggcwhat/CVE-2025-46080/ - () https://github.com/yggcwhat/CVE-2025-46080/ - Exploit, Third Party Advisory
First Time Huocms
Huocms huocms
CPE cpe:2.3:a:huocms:huocms:3.5.1:*:*:*:*:*:*:*

29 May 2025, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-29 14:15

Updated : 2025-06-04 19:59

NVD link : CVE-2025-46080

Mitre link : CVE-2025-46080

JSON object : View

Products Affected

huocms

  • huocms
CWE

No CWE.