CVE-2025-57516

CVE-2025-57516: OS command injection in PublicCMS versions 5.202506.a and 5.202506.b. The vulnerability arises from processing crafted DATABASE, USERNAME, or PASSWORD variables passed to backupDB.bat, enabling arbitrary command execution. Affected documentation from multiple sources confirms the ...