CVE-2025-8259

A vulnerability, which was classified as critical, was found in Vaelsys 4.1.0. This affects the function executeDataObjectProc of the file /grid/vgridserver.php. The manipulation of the argument xajaxargs leads to os command injection. It is possible to initiate the attack remotely. The exploit h...

CVE-2025-8259

CVE-2025-8259 affects Vaelsys 4.1.0. The vulnerability is an OS command injection in the function execute_DataObjectProc of the file /grid/vgrid_server.php, caused by manipulation of the xajaxargs argument. It can be triggered remotely, and public exploits have been disclosed; vendor responses ar...