CVEvulnerability
CVE-2025-57642
7.2 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2025-09-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-434
Description
A Shell Upload vulnerability in Tourism Management System 2.0 allows an attacker to upload and execute arbitrary PHP shell scripts on the server, leading to remote code execution and unauthorized access to the system. This can result in the compromise of sensitive data and system functionality.
Affected configurations
• sohamjuhin tourism management system 2.0
Related
Weakness · CWE (1)
- CWE-434 Unrestricted Upload of File with Dangerous Type weakness
References
- https://github.com/debug-security/CVE/tree/main/CVE-2025-57642 Exploit, Third Party Advisory
- https://github.com/sohamjuhin/Tourism-Management-System/issues/2 Exploit, Issue Tracking