172 matches found
CVE-2025-25767
A vertical privilege escalation vulnerability in the component /controller/UserController.java of MRCMS v3.1.2 allows attackers to arbitrarily delete users via a crafted request...
CVE-2025-25767
A vertical privilege escalation vulnerability in the component /controller/UserController.java of MRCMS v3.1.2 allows attackers to arbitrarily delete users via a crafted request...
CVE-2025-25768
MRCMS v3.1.2 was discovered to contain a server-side template injection SSTI vulnerability in the component \servlet\DispatcherServlet.java. This vulnerability allows attackers to execute arbitrary code via a crafted payload...
CVE-2025-25766
An arbitrary file upload vulnerability in the component /file/savefile.do of MRCMS v3.1.2 allows attackers to execute arbitrary code via uploading a crafted .jsp file...
CVE-2025-25765
MRCMS v3.1.2 was discovered to contain an arbitrary file write vulnerability via the component /file/save.do...
CVE-2025-25767
A vertical privilege escalation vulnerability in the component /controller/UserController.java of MRCMS v3.1.2 allows attackers to arbitrarily delete users via a crafted request...
CVE-2025-25765
MRCMS v3.1.2 was discovered to contain an arbitrary file write vulnerability via the component /file/save.do...
MRCMS 安全漏洞
MRCMS is a content management system by the individual developers of marker. A security vulnerability exists in MRCMS version v3.1.2, which stems from the /file/savefile.do module containing an arbitrary file upload vulnerability...
CVE-2025-25765
CVE-2025-25765 affects MRCMS v3.1.2, with a vulnerability in the /file/save.do component that permits arbitrary file write. Descriptions collected across multiple feeds consistently name the affected product and the vulnerable endpoint, indicating an impact on the ability to write files locally. ...
PT-2025-7573 · Mrcms · Mrcms
Name of the Vulnerable Software and Affected Versions: MRCMS version 3.1.2 Description: A vertical privilege escalation issue in the /controller/UserController.java component allows attackers to delete users arbitrarily via a crafted request. Recommendations: For MRCMS version 3.1.2, consider...
PT-2025-7574 · Mrcms · Mrcms
Name of the Vulnerable Software and Affected Versions: MRCMS version 3.1.2 Description: The issue is related to a server-side template injection SSTI vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. It is located in the component...
CVE-2025-25765
MRCMS v3.1.2 was discovered to contain an arbitrary file write vulnerability via the component /file/save.do...
CVE-2025-25766
CVE-2025-25766 affects MRCMS v3.1.2 in the /file/savefile.do endpoint, where an arbitrary file upload vulnerability allows an attacker to execute arbitrary code by uploading a crafted .jsp file. This is documented across multiple sources (NVD, Red Hat, OSV, CVE listing, PT-2025-7572 highlights th...
CVE-2025-25768
CVE-2025-25768 affects MRCMS v3.1.2 with a server-side template injection vulnerability in DispatcherServlet.java, enabling arbitrary code execution via a crafted payload. The connected documents describe the root cause and impact but do not provide a patch version or mitigation details; exploita...
CVE-2025-25768
MRCMS v3.1.2 was discovered to contain a server-side template injection SSTI vulnerability in the component \servlet\DispatcherServlet.java. This vulnerability allows attackers to execute arbitrary code via a crafted payload...
CVE-2025-25768
MRCMS v3.1.2 was discovered to contain a server-side template injection SSTI vulnerability in the component \servlet\DispatcherServlet.java. This vulnerability allows attackers to execute arbitrary code via a crafted payload...
CVE-2025-25767
A vertical privilege escalation vulnerability in the component /controller/UserController.java of MRCMS v3.1.2 allows attackers to arbitrarily delete users via a crafted request...
CVE-2025-25766
An arbitrary file upload vulnerability in the component /file/savefile.do of MRCMS v3.1.2 allows attackers to execute arbitrary code via uploading a crafted .jsp file...