CVE-2025-9402

creationtimestamp| type| source ---|---|--- 2025-08-25 04:42:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx76rti5z222...

CVE-2025-9402 HuangDou UTCMS Config update.php server-side request forgery

A vulnerability was found in HuangDou UTCMS 9. This issue affects some unknown processing of the file app/modules/ut-frame/admin/update.php of the component Config Handler. Performing manipulation of the argument UPDATEURL results in server-side request forgery. The attack is possible to be carri...