PT-2025-8946 · Hkcms · Hkcms

Published 2025-02-27 · Updated 2025-02-28 · CVE-2025-25761

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HkCms version 2.3.2.240702

Description The issue is related to an arbitrary file write vulnerability in the Appcenter.php component.

Recommendations For HkCms version 2.3.2.240702, consider restricting access to the Appcenter.php component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-73

Related Identifiers

CVE-2025-25761

Affected Products

Hkcms

References · 5

• 🔥 https://github.com/147536951/Qianyi-learn/blob/main/Hkcms.pdf · Exploit
• https://osv.dev/vulnerability/CVE-2025-25761 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-25761 · Security Note
• https://twitter.com/CVEnew/status/1895622685238972736 · Twitter Post
• https://t.me/cvedetector/19066 · Telegram Post