PT-2025-54176 · Unknown · 08Cms Novel System

Keneny · Published 2025-12-30 · Updated 2025-12-30 · CVE-2025-15250

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:L/Au:M/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions 08CMS Novel System versions up to 3.4

Description A security issue exists in 08CMS Novel System related to the processing of the admina/mtpls.inc.php file within the Template Handler component. This manipulation can lead to code injection, and the attack can be initiated remotely. The exploit for this issue has been publicly disclosed.

Recommendations Versions prior to 3.4 should be updated. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Special Elements Injection

Code Injection

Weakness Enumeration

CWE-74

CWE-94

Related Identifiers

CVE-2025-15250

Affected Products

08Cms Novel System

References · 7

• 🔥 https://gitee.com/keneny/cve/issues/ID3DEM · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-15250 · Security Note
• https://t.me/CVEtracker/40956 · Telegram Post
• https://twitter.com/CVEnew/status/2006006721009926543 · Twitter Post
• https://vuldb.com/?id.338640 · Note
• https://vuldb.com/?ctiid.338640 · Note
• https://twitter.com/VulmonFeeds/status/2006018328272187543 · Twitter Post