Lucene search
+L

7 matches found

osv_cve
osv_cve
•added 2025/12/04 8:16 p.m.•42 views

CVE-2025-65806

The E-POINT CMS eagle.gsam-1169.1 file upload feature improperly handles nested archive files. An attacker can upload a nested ZIP a ZIP containing another ZIP where the inner archive contains an executable file e.g. webshell.php. When the application extracts the uploaded archives, the executabl...

4.3CVSS6.4AI score0.00307EPSS
SaveExploits1References2
NVD
NVD
•added 2025/12/04 8:16 p.m.•19 views

CVE-2025-65806

The E-POINT CMS eagle.gsam-1169.1 file upload feature improperly handles nested archive files. An attacker can upload a nested ZIP a ZIP containing another ZIP where the inner archive contains an executable file e.g. webshell.php. When the application extracts the uploaded archives, the executabl...

4.3CVSS0.00307EPSS
SaveExploits1References2
CVE
CVE
•added 2025/12/04 12:00 a.m.•40 views

CVE-2025-65806

The E-POINT CMS (version eagle.gsam-1169.1 ) is vulnerable to remote code execution (RCE) due to improper handling of nested archive files in its file upload feature. An attacker can upload a nested ZIP containing another ZIP that houses an executable file, such as a webshell.php . If the applica...

4.3CVSS6.2AI score0.00307EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/04 12:00 a.m.•11 views

CVE-2025-65806: Unrestricted Upload of File with Dangerous Type

The E-POINT CMS eagle.gsam-1169.1 file upload feature improperly handles nested archive files. An attacker can upload a nested ZIP a ZIP containing another ZIP where the inner archive contains an executable file e.g. webshell.php. When the application extracts the uploaded archives, the executabl...

4.3CVSS6.2AI score0.00307EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/12/04 12:00 a.m.•20 views

e-point CMS 安全漏洞

e-point CMS is a content management system from e-point Poland. A security vulnerability exists in e-point CMS eagle.gsam-1169.1 version, which stems from the file upload feature not adequately validating archived content, which could lead to remote code execution...

4.3CVSS7.9AI score0.00307EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2025/12/04 12:00 a.m.•11 views

CVE-2025-65806

The E-POINT CMS eagle.gsam-1169.1 file upload feature improperly handles nested archive files. An attacker can upload a nested ZIP a ZIP containing another ZIP where the inner archive contains an executable file e.g. webshell.php. When the application extracts the uploaded archives, the executabl...

6.2AI score0.00307EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/12/04 12:00 a.m.•47 views

CVE-2025-65806

The E-POINT CMS eagle.gsam-1169.1 file upload feature improperly handles nested archive files. An attacker can upload a nested ZIP a ZIP containing another ZIP where the inner archive contains an executable file e.g. webshell.php. When the application extracts the uploaded archives, the executabl...

0.00307EPSS
SaveExploits1References2
Rows per page
Query Builder