CVE-2025-1890
- Reference to the description:
- Description:
- A vulnerability has been found in shishuocms 1.1 and classified as critical. This vulnerability affects the function handleRequest of the file src/main/java/com/shishuo/cms/action/manage/ManageUpLoadAction.java. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
- Last updated date:
- 03/05/2025
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 03/05/2025