EUVD-2025-199675

Unauthenticated Arbitrary File Deletion patchcontents.php in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform The deletepatch parameter allows unauthenticated deletion of arbitrary files...

CVE-2025-66257

Affects DB Electronica Mozart FM Transmitter series (versions 30–7000). The deletepatch parameter in patch_contents.php allows unauthenticated deletion of arbitrary files in /var/www/patch/ due to lack of sanitization and access checks, per CVE-2025-66257 notes across NVD/Red Hat/CIRCL/CVE lists....

CVE-2025-66257 Unauthenticated Arbitrary File Deletion (patch_contents.php)

Unauthenticated Arbitrary File Deletion patchcontents.php in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform The deletepatch parameter allows unauthenticated deletion of arbitrary files...