CVE-2025-57516

The PublicCMS open-source content management system (Java-based) is vulnerable to OS Command injection in versions 5.202506.a and 5.202506.b . The root cause is the incorrect manipulation of the DATABASE, USERNAME, or PASSWORD variables within the backupDB.bat file. An attacker can exploit this b...