CVE-2025-15067 - CERT CVE
ID CVE-2025-15067
Sažetak Unrestricted Upload of File with Dangerous Type vulnerability in Innorix Innorix WP allows Upload a Web Shell to a Web Server.This issue affects Innorix WP from All versions If the "exam" directory exists under the directory where the product is installed (ex: innorix/exam)
Reference
CVSS
Base: 7.7
Impact: 5.2
Exploitability:2.5
Pristup
VektorSloženostAutentikacija
LOCAL LOW NONE
Impact
PovjerljivostCjelovitostDostupnost
HIGH HIGH NONE
CVSS vektor CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Zadnje važnije ažuriranje 29-12-2025 - 01:15
Objavljeno 29-12-2025 - 01:15