CVE-2025-10353-POC

CVE-2025-10353 POC - 文件上传 RCE 🛠️ CVE-2025-10353 的 POC：Melis Platform 的 melis-cms-slider 模块中存在一个文件上传漏洞，当攻击者通过 mcsdetailimg 参数向以下地址上传恶意文件时，可能导致远程代码执行（RCE）： root@kitploit: /melis/MelisCmsSlider/MelisCmsSliderDetails/saveDetailsForm 🔗 参考链接 📄 MITRE 上的 CVE-2025-10353 📄 INCIBE（西班牙国家网络安全研究所）关于 Melis...

Arbitrary Code Execution

melisplatform/melis-cms-slider is vulnerable to Arbitrary Code Execution. The vulnerability is due to insufficient validation of uploaded files, where the mcsdetailimg parameter in the saveDetailsForm endpoint accepts malicious file uploads, and attackers can exploit this to upload executable...

CVE-2025-10353

CVE-2025-10353 is an RCE via unrestricted file upload in Melis Technology's Melis Platform, specifically the melis-cms-slider module. A crafted POST to /melis/MelisCmsSlider/MelisCmsSliderDetails/saveDetailsForm uploading via the mcsdetail_img parameter can allow an attacker to place and execute ...