OS Command injection vulnerability in PublicCMS PublicCMS-V5.202506.a, and PublicCMS-V5.202506.b allowing attackers to execute arbitrary commands via crafted DATABASE, USERNAME, or PASSWORD variables to the backupDB.bat file.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Publiccms |
|
No data.
No data.
References
| Link | Providers |
|---|---|
| https://github.com/sanluan/PublicCMS/issues/97 |
|
History
Tue, 30 Sep 2025 09:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Publiccms
Publiccms publiccms |
|
| Vendors & Products |
Publiccms
Publiccms publiccms |
Mon, 29 Sep 2025 14:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | OS Command injection vulnerability in PublicCMS PublicCMS-V5.202506.a, and PublicCMS-V5.202506.b allowing attackers to execute arbitrary commands via crafted DATABASE, USERNAME, or PASSWORD variables to the backupDB.bat file. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2025-09-29T00:00:00.000Z
Updated: 2025-09-29T14:27:17.882Z
Reserved: 2025-08-17T00:00:00.000Z
Link: CVE-2025-57516
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2025-09-29T15:16:08.767
Modified: 2025-09-29T19:34:10.030
Link: CVE-2025-57516
Redhat
No data.