CVE-2025-3842

CRITICO 9.8CVE-2025-3842 · Published 21/04/2025 · updated 17/06/2026

In breve

CVE-2025-3842 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda ds-java (panhainan).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.71%, superiore al 53.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
ds-java panhainan	`= 1.0`	No fix yet

Description

A vulnerability was found in panhainan DS-Java 1.0 and classified as critical. This issue affects the function uploadUserPic.action of the file src/com/phn/action/FileUpload.java. The manipulation of the argument fileUpload leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

References

caigo8/CVE-md · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Altre vulnerabilità di ds-java

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free