PT-2025-51863 · Ritecms · Ritecms

Handylulu + 1 · Published 2025-12-17 · Updated 2025-12-17 · CVE-2025-67168

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions RiteCMS version 3.1.0

Description RiteCMS v3.1.0 uses insecure encryption for password storage. This could allow an attacker to compromise user accounts if they gain access to the stored password data.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Fix

Weakness Enumeration

CWE-916

Related Identifiers

CVE-2025-67168

Affected Products

Ritecms

References · 8

• 🔥 https://github.com/mbiesiad/vulnerability-research/tree/main/CVE-2025-67168 · Exploit
• https://osv.dev/vulnerability/CVE-2025-67168 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-67168 · Security Note
• https://github.com/handylulu/RiteCMS · Note
• https://github.com/handylulu/RiteCMS/blob/master/cms/includes/functions.admin.inc.php · Note
• https://twitter.com/CVEnew/status/2001365748027990494 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2001388337978851805 · Twitter Post
• https://t.me/CVEtracker/40067 · Telegram Post