CVE-2025-2607

The CVE-2025-2607 entry concerns phplaozhang LzCMS-LaoZhangBoKeXiTong up to version 1.1.4. The vulnerability occurs in the HTTP POST Request Handler for the file /admin/upload/upimage.html, where manipulation of the File argument enables unrestricted file upload. Exploitation is described as remo...