CVE-2025-63227

🗓️ 18 Nov 2025 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 42 Views🌐 WEB

Unrestricted file upload on patch.php in Mozart FM Transmitter enables admin to upload arbitrary files and execute commands.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2025-63227	18 Nov 202522:03	–	circl
CNNVD	DB Electronica Mozart FM Transmitter has a security vulnerability	18 Nov 202500:00	–	cnnvd
Cvelist	CVE-2025-63227	18 Nov 202500:00	–	cvelist
EUVD	EUVD-2025-198084	18 Nov 202521:32	–	euvd
NVD	CVE-2025-63227	18 Nov 202520:15	–	nvd
Positive Technologies	PT-2025-47398	18 Nov 202500:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2025-63227: Unrestricted Upload of File with Dangerous Type	18 Nov 202500:00	–	rapid7
RedhatCVE	CVE-2025-63227	19 Nov 202500:11	–	redhatcve
Vulnrichment	CVE-2025-63227	18 Nov 202500:00	–	vulnrichment

NVD

Node

AND

dbbroadcast mozart_next_100_firmwareMatch-

dbbroadcast mozart_next_100Match-

Node

AND

dbbroadcast mozart_next_1000_firmwareMatch-

dbbroadcast mozart_next_1000Match-

Node

AND

dbbroadcast mozart_next_2000_firmwareMatch-

dbbroadcast mozart_next_2000Match-

Node

AND

dbbroadcast mozart_next_30_firmwareMatch-

dbbroadcast mozart_next_30Match-

Node

AND

dbbroadcast mozart_next_300_firmwareMatch-

dbbroadcast mozart_next_300Match-

Node

AND

dbbroadcast mozart_next_3000_firmwareMatch-

dbbroadcast mozart_next_3000Match-

Node

AND

dbbroadcast mozart_next_3500_firmwareMatch-

dbbroadcast mozart_next_3500Match-

Node

AND

dbbroadcast mozart_next_50_firmwareMatch-

dbbroadcast mozart_next_50Match-

Node

AND

dbbroadcast mozart_next_500_firmwareMatch-

dbbroadcast mozart_next_500Match-

Node

AND

dbbroadcast mozart_next_6000_firmwareMatch-

dbbroadcast mozart_next_6000Match-

Node

AND

dbbroadcast mozart_next_7000_firmwareMatch-

dbbroadcast mozart_next_7000Match-

Node

AND

dbbroadcast mozart_dds_next_30_firmwareMatch-

dbbroadcast mozart_dds_next_30Match-

Node

AND

dbbroadcast mozart_dds_next_50_firmwareMatch-

dbbroadcast mozart_dds_next_50Match-

Node

AND

dbbroadcast mozart_dds_next_100_firmwareMatch-

dbbroadcast mozart_dds_next_100Match-

Node

AND

dbbroadcast mozart_dds_next_300_firmwareMatch-

dbbroadcast mozart_dds_next_300Match-

Node

AND

dbbroadcast mozart_dds_next_500_firmwareMatch-

dbbroadcast mozart_dds_next_500Match-

Node

AND

dbbroadcast mozart_dds_next_1000_firmwareMatch-

dbbroadcast mozart_dds_next_1000Match-

Node

AND

dbbroadcast mozart_dds_next_2000_firmwareMatch-

dbbroadcast mozart_dds_next_2000Match-

Node

AND

dbbroadcast mozart_dds_next_3000_firmwareMatch-

dbbroadcast mozart_dds_next_3000Match-

Node

AND

dbbroadcast mozart_dds_next_3500_firmwareMatch-

dbbroadcast mozart_dds_next_3500Match-

Node

AND

dbbroadcast mozart_dds_next_6000_firmwareMatch-

dbbroadcast mozart_dds_next_6000Match-

Node

AND

dbbroadcast mozart_dds_next_7000_firmwareMatch-

dbbroadcast mozart_dds_next_7000Match-

Source	Link
dbbroadcast	www.dbbroadcast.com/
github	www.github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63227_Mozart_FM_Transmitter_authenticated_File_Upload

Parameter	Position	Path	Description	CWE
file	request body	/patch.php	Unrestricted file upload vulnerability in the /patch.php endpoint allowing an attacker to upload arbitrary files (e.g., PHP webshells) to the /patch/ directory.	CWE-434

17 Jun 2026 09:52Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.17.2

EPSS0.00609

SSVC

CWE-434