CVE-2025-50881

CVE-2025-50881: API Use it Flow 中通过 moniteur.php 实现远程代码执行 标识符: CVE-2025-50881 受影响产品: API Use it Flow 版本 8.2.0 Rev 15851, 版本 9.2.0 Rev 18093 编辑者: https://www.tenorsolutions.com 原 https://api-sas.fr/ 受影响组件: flow/admin/moniteur.php 漏洞类型: 通过 eval 注入实现的远程代码执行 RCE 严重性: 严重 描述: flow/admin/moniteur.php...

CVE-2025-50881

The flow/admin/moniteur.php script in Use It Flow administration website before 10.0.0 is vulnerable to Remote Code Execution. When handling GET requests, the script takes user-supplied input from the action URL parameter, performs insufficient validation, and incorporates this input into a strin...

CVE-2025-50881: Improper Control of Generation of Code

The flow/admin/moniteur.php script in Use It Flow administration website before 10.0.0 is vulnerable to Remote Code Execution. When handling GET requests, the script takes user-supplied input from the action URL parameter, performs insufficient validation, and incorporates this input into a strin...

Exploit for CVE-2025-50881

CVE-2025-50881: Remote Code Execution in API Use it Flow via m...