CVE-2025-15415

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-15415

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15415.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-15415

Published

2026-01-01T22:15:42.830Z

Modified

2026-04-02T12:33:31.754778Z

Severity

5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

A vulnerability has been found in xnx3 wangmarket up to 6.4. The impacted element is the function uploadImage of the file /sits/uploadImage.do of the component XML File Handler. The manipulation of the argument image leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

References

Affected packages

Git / github.com/xnx3/wangmarket

Affected ranges

Type

GIT

Repo

https://github.com/xnx3/wangmarket

Events

Introduced

Last affected

735c6e34a16edd00eb069e578e7fda0fd09cec18

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "6.4"
        }
    ]
}

Affected versions

v4.*

v4.10

v4.11

v4.3

v4.5

v4.6

v4.7

v4.7.1

v4.8

v5.*

v5.0

v5.1

v5.2

v5.4

v5.7

v6.*

v6.4

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15415.json"