CVE-2025-67325

🚨 Esecuzione di codice in remoto RCE non autenticata tramite caricamento file 📌 Panoramica Progetto: QloApps Repository: https://github.com/Qloapps/QloApps Versioni interessate: = 1.7.0 Classe di vulnerabilità: Esecuzione di codice in remoto non autenticata Gravità: Critica CVSS v3.1: Critica 9.8...

CVE-2025-67325

Unrestricted file upload in the hotel review feature in QloApps versions 1.7.0 and earlier allows remote unauthenticated attackers to achieve remote code execution...

CVE-2025-67325

CVE-2025-67325 is an unrestricted file upload vulnerability in QloApps, affecting version 1.7.0 and earlier within the hotel review feature. The issue allows remote unauthenticated attackers to achieve remote code execution (RCE). Public advisories corroborate the RCE potential; evidence of a PoC...