CVE-2025-15262

Katalog CVE

CVSS 7.2 · High EPSS 0,34%

Kerentanan Improper Access Control pada biggidroid simple php cms. Skor CVSS 3.1 7.2 (High) menurut NVD.

Deskripsi (NVD)

A security flaw has been discovered in BiggiDroid Simple PHP CMS 1.0. This impacts an unknown function of the file /admin/edit.php of the component Site Logo Handler. Performing a manipulation of the argument image results in unrestricted upload. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.

Rincian

Terbit di NVD

30 Desember 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-284: Improper Access Control
CWE-434: Unrestricted Upload of File with Dangerous Type

EPSS (30 hari)

0,34% peluang dieksploitasi; lebih tinggi dari 25,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gitee.com/shanyaohei/black-yam/issues/IDGML9 exploit · issue tracking · advisory pihak ketiga
• https://vuldb.com/?id.338656 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.725815 advisory pihak ketiga · vdb entry
• https://vuldb.com/?ctiid.338656 permissions required · vdb entry