PT-2025-40807 · Unknown · Ixmaps Website2017

Jaredloo · Published 2025-10-05 · Updated 2025-10-07 · CVE-2025-11291

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ixmaps website2017 versions prior to 0c71cffa0162186bc057a76766bc97e9f5a3a2d0

Description A security flaw exists that allows for cross site scripting. The issue is related to the manipulation of the trid argument within an HTTP GET request handled by a file, /map.php, and an unknown function. The attack can be initiated remotely. The exploit has been released publicly.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-11291

Affected Products

Ixmaps Website2017

References · 9

• 🔥 https://github.com/PlsRevert/CVEs/issues/2#issue-3444474977 · Exploit
• 🔥 https://github.com/PlsRevert/CVEs/issues/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-11291 · Security Note
• https://vuldb.com/?id.327172 · Note
• https://vuldb.com/?submit.661179 · Note
• https://t.me/CVEtracker/34176 · Telegram Post
• https://vuldb.com/?ctiid.327172 · Note
• https://t.me/cveNotify/137654 · Telegram Post
• https://t.me/cveNotify/137416 · Telegram Post