PT-2025-35144 · Weaver · Weaver E-Mobile Mobile Management Platform

Goojar · Published 2025-08-28 · Updated 2025-08-29 · CVE-2025-9590

Positive Technologies · (AI Summary)

CVSS v2.0

4.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions:

Weaver E-Mobile Mobile Management Platform versions prior to 20250814

Description:

A cross site scripting issue exists in Weaver E-Mobile Mobile Management Platform. The `gohome` argument can be manipulated to trigger this issue. This attack can be initiated remotely. The exploit is publicly available. The vendor was contacted regarding this disclosure but did not respond.

Recommendations:

Update Weaver E-Mobile Mobile Management Platform to a version later than 20250813.

Exploit

Fix

Code Injection

XSS

Weakness Enumeration

CWE-94

CWE-79

Related Identifiers

CVE-2025-9590

Affected Products

Weaver E-Mobile Mobile Management Platform

References · 9

• 🔥 https://github.com/Lee0568/pocccc/blob/main/poc.md · Exploit
• 🔥 https://github.com/Lee0568/pocccc/blob/main/poc.md#vulnerability-analysis · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-9590 · Security Note
• https://vuldb.com/?ctiid.321762 · Note
• https://t.me/cveNotify/133867 · Telegram Post
• https://t.me/CVEtracker/31173 · Telegram Post
• https://vuldb.com/?id.321762 · Note
• https://vuldb.com/?submit.636164 · Note
• https://twitter.com/CVEnew/status/1961282422051672278 · Twitter Post