PT-2026-1039 · Empiresoft · Empirecms

Gets · Publicado 2026-01-02 · Atualizado 2026-01-07 · CVE-2025-15422

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions EmpireSoft EmpireCMS versions up to 8.0

Description A security issue exists in EmpireSoft EmpireCMS related to the IP Address Handler component. The issue resides in the egetip function within the e/class/connect.php file. This flaw results in a failure of protection mechanisms. The attack can be initiated remotely. The exploit for this issue has been published. The vendor was notified but did not respond.

Recommendations Versions prior to 8.0 should be updated. As a temporary workaround, consider restricting access to the e/class/connect.php file to minimize the risk of exploitation.

Exploit

Correção

Protection Mechanism Failure

Enumeração de Fraquezas

CWE-693

Identificadores relacionados

CVE-2025-15422

Produtos afetados

Empirecms

Referências · 12

• 🔥 https://note-hxlab.wetolink.com/share/0x74KEtzecFb#-span--strong-proof-of-concept---strong---span- · Exploit
• 🔥 https://note-hxlab.wetolink.com/share/0x74KEtzecFb · Exploit
• https://t.me/cveNotify/147995 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/2006968105214308527 · Publicação no Twitter
• https://vuldb.com/?id.339344 · Nota
• https://vuldb.com/?submit.721344 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-15422 · Nota de Segurança
• https://vuldb.com/?ctiid.339344 · Nota
• https://osv.dev/vulnerability/CVE-2025-15422 · Aviso do Fabricante
• https://t.me/CVEtracker/41210 · Publicação no Telegram
• https://t.me/cveNotify/147469 · Publicação no Telegram
• https://t.me/cveNotify/147779 · Publicação no Telegram