CVE-2025-63228

🗓️ 18 Nov 2025 00:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 34 Views🌐 WEB

CVE-2025-63228: Unauthenticated upload on /upload_file.php enables remote code execution WEBMOZZI-00287.

Reporter	Title	Published	Views	Family All 7
CNNVD	DB Electronica Mozart FM Transmitter 安全漏洞	18 Nov 202500:00	–	cnnvd
Cvelist	CVE-2025-63228	18 Nov 202500:00	–	cvelist
EUVD	EUVD-2025-198095	18 Nov 202521:32	–	euvd
NVD	CVE-2025-63228	18 Nov 202520:15	–	nvd
Positive Technologies	PT-2025-47402	18 Nov 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-63228	19 Nov 202500:11	–	redhatcve
Vulnrichment	CVE-2025-63228	18 Nov 202500:00	–	vulnrichment

NVD

Node

AND

dbbroadcast mozart_next_100_firmwareMatch-

dbbroadcast mozart_next_100Match-

Node

AND

dbbroadcast mozart_next_1000_firmwareMatch-

dbbroadcast mozart_next_1000Match-

Node

AND

dbbroadcast mozart_next_2000_firmwareMatch-

dbbroadcast mozart_next_2000Match-

Node

AND

dbbroadcast mozart_next_30_firmwareMatch-

dbbroadcast mozart_next_30Match-

Node

AND

dbbroadcast mozart_next_300_firmwareMatch-

dbbroadcast mozart_next_300Match-

Node

AND

dbbroadcast mozart_next_3000_firmwareMatch-

dbbroadcast mozart_next_3000Match-

Node

AND

dbbroadcast mozart_next_3500_firmwareMatch-

dbbroadcast mozart_next_3500Match-

Node

AND

dbbroadcast mozart_next_50_firmwareMatch-

dbbroadcast mozart_next_50Match-

Node

AND

dbbroadcast mozart_next_500_firmwareMatch-

dbbroadcast mozart_next_500Match-

Node

AND

dbbroadcast mozart_next_6000_firmwareMatch-

dbbroadcast mozart_next_6000Match-

Node

AND

dbbroadcast mozart_next_7000_firmwareMatch-

dbbroadcast mozart_next_7000Match-

Node

AND

dbbroadcast mozart_dds_next_30_firmwareMatch-

dbbroadcast mozart_dds_next_30Match-

Node

AND

dbbroadcast mozart_dds_next_50_firmwareMatch-

dbbroadcast mozart_dds_next_50Match-

Node

AND

dbbroadcast mozart_dds_next_100_firmwareMatch-

dbbroadcast mozart_dds_next_100Match-

Node

AND

dbbroadcast mozart_dds_next_300_firmwareMatch-

dbbroadcast mozart_dds_next_300Match-

Node

AND

dbbroadcast mozart_dds_next_500_firmwareMatch-

dbbroadcast mozart_dds_next_500Match-

Node

AND

dbbroadcast mozart_dds_next_1000_firmwareMatch-

dbbroadcast mozart_dds_next_1000Match-

Node

AND

dbbroadcast mozart_dds_next_2000_firmwareMatch-

dbbroadcast mozart_dds_next_2000Match-

Node

AND

dbbroadcast mozart_dds_next_3000_firmwareMatch-

dbbroadcast mozart_dds_next_3000Match-

Node

AND

dbbroadcast mozart_dds_next_3500_firmwareMatch-

dbbroadcast mozart_dds_next_3500Match-

Node

AND

dbbroadcast mozart_dds_next_6000_firmwareMatch-

dbbroadcast mozart_dds_next_6000Match-

Node

AND

dbbroadcast mozart_dds_next_7000_firmwareMatch-

dbbroadcast mozart_dds_next_7000Match-

Source	Link
github	www.github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63228_Mozart_FM_Transmitter_Unauthenticated_File_Upload
dbbroadcast	www.dbbroadcast.com/

Parameter	Position	Path	Description	CWE
file	request body	/upload_file.php	Unauthenticated file upload leading to remote code execution via uploaded webshell stored in /upload/ directory.	CWE-434
file	path	/upload/	Uploaded file stored under /upload/ enabling potential RCE if file is executed on the server.	CWE-434

17 Jun 2026 09:52Current

7.8High risk

Vulners AI Score7.8

CVSS 3.19.8

EPSS0.00745

SSVC

unauthenticated upload upload_file.php mozart transmitter upload directory remote code execution