Return to CVE list

CVE-2025-3552

7.3
Critical

CVE-2025-3552

cna@vuldb.com
Awaiting Analysis

Description

A vulnerability was found in Lingxing ERP 2. It has been classified as critical. This affects an unknown part of the file /Api/TinyMce/UploadAjax.ashx. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment.

Exploits

No known exploits found for this CVE.

Search Exploit-DB