PT-2025-22657 · Unknown · Fujian Kelixun

Wanglun · Published 2025-05-23 · Updated 2025-05-23 · CVE-2025-5106

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Fujian Kelixun version 1.0

Description A critical issue has been found in the Filename Handler component, specifically affecting the /app/fax/fax view.php file. The manipulation of the fax file argument leads to os command injection, allowing for remote attacks. The exploit has been publicly disclosed, and the vendor was contacted but did not respond.

Recommendations For Fujian Kelixun version 1.0, as a temporary workaround, consider restricting access to the vulnerable fax view.php file until a patch is available. Additionally, avoid using the fax file argument in the affected component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

CVE-2025-5106

Affected Products

Fujian Kelixun

References · 8

• 🔥 https://github.com/byxs0x0/SQL/issues/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-5106 · Security Note
• https://vuldb.com/?ctiid.310083 · Note
• https://t.me/cvetracker/24532 · Telegram Post
• https://vuldb.com/?submit.569404 · Note
• https://t.me/latest_high_impact_cve/2446 · Telegram Post
• https://vuldb.com/?id.310083 · Note
• https://t.me/cvenotify/123428 · Telegram Post