CVE-2025-15129

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-15129

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15129.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-15129

Published

2025-12-28T09:02:10.127Z

Modified

2026-07-15T01:49:07.018492848Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

ChenJinchuang Lin-CMS-TP5 File Upload LocalUploader.php upload code injection

Details

A flaw has been found in ChenJinchuang Lin-CMS-TP5 up to 0.3.3. This vulnerability affects the function Upload of the file application/lib/file/LocalUploader.php of the component File Upload Handler. Executing manipulation of the argument File can lead to code injection. The attack can be executed remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/15xxx/CVE-2025-15129.json",
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-74",
        "CWE-94"
    ]
}

References

Affected packages

Git / github.com/chenjinchuang/lin-cms-tp5

Affected ranges

Type

GIT

Repo

https://github.com/chenjinchuang/lin-cms-tp5

Events

Introduced

df52a659296e1b383e7afe4d73479059c1a2a4e5

Last affected

a4079c7b982ee0a8a5b84833343570dc4f6bf46e

Database specific

{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "0.3.0"
        },
        {
            "last_affected": "0.3.0"
        },
        {
            "introduced": "0.3.1"
        },
        {
            "last_affected": "0.3.1"
        },
        {
            "introduced": "0.3.2"
        },
        {
            "last_affected": "0.3.2"
        },
        {
            "introduced": "0.3.3"
        },
        {
            "last_affected": "0.3.3"
        }
    ]
}

Affected versions

0.*

0.3.0

0.3.1

0.3.2

0.3.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15129.json"