deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-45150
Published: 2025-08-01
Description: Insecure permissions in LangChain-ChatGLM-Webui commit ef829 allows attackers to arbitrarily view and download sensitive files via supplying a crafted request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-732
References: http://langchain-chatglm-webui.com; https://gist.github.com/ycshao12/69a48551cc6c9cc69153d137afe9ecef; https://github.com/X-D-Lab/LangChain-ChatGLM-Webui
CVE: CVE-2025-45778
Published: 2025-08-01
Description: A stored cross-site scripting (XSS) vulnerability in The Language Sloth Web Application v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Description text field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://languagesloth.com/; https://packetstorm.news/files/id/206262
CVE: CVE-2025-48074
Published: 2025-08-01
Description: OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In version 3.3.2, applications trust unvalidated dataWindow size values from file headers, which can lead to excessive memory allocation and performance degradation when processing malicious files. This is fixed in version 3.3.3.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770
References: https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-x22w-82jp-8rvf; https://github.com/ShielderSec/poc/tree/main/CVE-2025-48074
CVE: CVE-2025-51501
Published: 2025-08-01
Description: Reflected Cross-Site Scripting (XSS) in the id parameter of the live_edit.module_settings API endpoint in Microweber CMS2.0 allows execution of arbitrary JavaScript.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/progprnv/CVE-Reports; https://github.com/progprnv/CVE-Reports/blob/main/CVE-2025-51501; https://github.com/progprnv/CVE-Reports/blob/main/MICROWEBER%20%5BAdmin%20Panel%5D%20Reflected%20XSS%20on%20id%20parameter.md
CVE: CVE-2025-51502
Published: 2025-08-01
Description: Reflected Cross-Site Scripting (XSS) in Microweber CMS 2.0 via the layout parameter on the /admin/page/create page allows arbitrary JavaScript execution in the context of authenticated admin users.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/progprnv/CVE-Reports; https://github.com/progprnv/CVE-Reports/blob/main/CVE-2025-51502; https://github.com/progprnv/CVE-Reports/blob/main/MICROWEBER%20%5BAdmin%20Panel%5D%20Reflected%20XSS%20on%20layout%20parameter.md
CVE: CVE-2025-51504
Published: 2025-08-01
Description: Microweber CMS 2.0 is vulnerable to Cross Site Scripting (XSS)in the /projects/profile, homepage endpoint via the last name field.
CVSS Score: 7.6 (HIGH)
CWE: CWE-79
References: https://github.com/progprnv/CVE-Reports; https://github.com/progprnv/CVE-Reports/blob/main/CVE-2025-51504; https://github.com/progprnv/CVE-Reports/blob/main/MICROWEBER%20%5BLive%20Panel%5D%20Stored%20XSS%20in%20profile%20path.md
CVE: CVE-2023-32256
Published: 2025-08-01
Description: A flaw was found in the Linux kernel's ksmbd component. A race condition between smb2 close operation and logoff in multichannel connections could result in a use-after-free issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-421
References: https://access.redhat.com/security/cve/CVE-2023-32256; https://bugzilla.redhat.com/show_bug.cgi?id=2385885; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=abcc506a9a71976a8b4c9bf3ee6efd13229c1e19
CVE: CVE-2025-2824
Published: 2025-08-01
Description: IBM Operational Decision Manager 8.11.0.1, 8.11.1.0, 8.12.0.1, 9.0.0.1, and 9.5.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.
CVSS Score: 7.4 (HIGH)
CWE: CWE-601
References: https://www.ibm.com/support/pages/node/7241286
CVE: CVE-2025-33118
Published: 2025-08-01
Description: IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 12 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://www.ibm.com/support/pages/node/7241303
CVE: CVE-2025-49832
Published: 2025-08-01
Description: Asterisk is an open source private branch exchange and telephony toolkit. In versions up to and including 18.26.2, between 20.00.0 and 20.15.0, 20.7-cert6, 21.00.0, 22.00.0 through 22.5.0, there is a remote DoS and possible RCE condition in `asterisk/res/res_stir_shaken /verification.c` that can be exploited when an attacker can set an arbitrary Identity header, or STIR/SHAKEN is enabled, with verification set in the SIP profile associated with the endpoint to be attacked. This is fixed in versions 18.26.3, 20.7-cert6, 20.15.1, 21.10.1 and 22.5.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/asterisk/asterisk/security/advisories/GHSA-mrq5-74j5-f5cr
CVE: CVE-2025-50868
Published: 2025-08-01
Description: A SQL Injection vulnerability exists in the takeassessment2.php file of CloudClassroom-PHP-Project 1.0. The Q4 POST parameter is not properly sanitized before being used in SQL queries.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://gist.github.com/b0mk35h/393a5491ef82fe0ede9207e4bc5953fb
CVE: CVE-2025-50869
Published: 2025-08-01
Description: A stored Cross-Site Scripting (XSS) vulnerability exists in the qureydetails.php page of Institute-of-Current-Students 1.0, where the input fields for Query and Answer do not properly sanitize user input. Authenticated users can inject arbitrary JavaScript code.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/b0mk35h/1fabbff8c95c6b7180c4ef404a337b8b; https://portswigger.net/web-security/cross-site-scripting/stored
CVE: CVE-2025-50870
Published: 2025-08-01
Description: Institute-of-Current-Students 1.0 is vulnerable to Incorrect Access Control in the mydetailsstudent.php endpoint. The myds GET parameter accepts an email address as input and directly returns the corresponding student's personal information without validating the identity or permissions of the requesting user. This allows any authenticated or unauthenticated attacker to enumerate and retrieve sensitive student details by altering the email value in the request URL, leading to information disclosure.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://cwe.mitre.org/data/definitions/284.html; https://gist.github.com/b0mk35h/c4d47b5c4aacecdc8e6c4b02b40ce302
CVE: CVE-2025-53009
Published: 2025-08-01
Description: MaterialX is an open standard for the exchange of rich material and look-development content across applications and renderers. In versions 1.39.2 and below, when parsing an MTLX file with multiple nested nodegraph implementations, the MaterialX XML parsing logic can potentially crash due to stack exhaustion. An attacker could intentionally crash a target program that uses OpenEXR by sending a malicious MTLX file. This is fixed in version 1.39.3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://github.com/AcademySoftwareFoundation/MaterialX/issues/2504; https://github.com/AcademySoftwareFoundation/MaterialX/pull/2505; https://github.com/AcademySoftwareFoundation/MaterialX/releases/tag/v1.39.3
CVE: CVE-2025-53010
Published: 2025-08-01
Description: MaterialX is an open standard for the exchange of rich material and look-development content across applications and renderers. In version 1.39.2, when parsing shader nodes in a MTLX file, the MaterialXCore code accesses a potentially null pointer, which can lead to crashes with maliciously crafted files. An attacker could intentionally crash a target program that uses OpenEXR by sending a malicious MTLX file. This is fixed in version 1.39.3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/AcademySoftwareFoundation/MaterialX/commit/e13344ba13326869d7820b444705f24d56fab73d; https://github.com/AcademySoftwareFoundation/MaterialX/security/advisories/GHSA-3jhf-gxhr-q4cx; https://github.com/ShielderSec/poc/tree/main/CVE-2025-53010
CVE: CVE-2025-53011
Published: 2025-08-01
Description: MaterialX is an open standard for the exchange of rich material and look-development content across applications and renderers. In version 1.39.2, when parsing shader nodes in a MTLX file, the MaterialXCore code accesses a potentially null pointer, which can lead to crashes with maliciously crafted files. An attacker could intentionally crash a target program that uses MaterialX by sending a malicious MTLX file. This is fixed in version 1.39.3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/AcademySoftwareFoundation/MaterialX/commit/7ac1c71de5187dc29793292b5a8dc6d784192ecf; https://github.com/AcademySoftwareFoundation/MaterialX/releases/tag/v1.39.3; https://github.com/AcademySoftwareFoundation/MaterialX/security/advisories/GHSA-7qw8-3vmf-gj32
CVE: CVE-2025-53012
Published: 2025-08-01
Description: MaterialX is an open standard for the exchange of rich material and look-development content across applications and renderers. In version 1.39.2, nested imports of MaterialX files can lead to a crash via stack memory exhaustion, due to the lack of a limit on the "import chain" depth. When parsing file imports, recursion is used to process nested files; however, there is no limit imposed to the depth of files that can be parsed by the library. By building a sufficiently deep chain of MaterialX files one referencing the next, it is possible to crash the process using the MaterialX library via stack exhaustion. This is fixed in version 1.39.3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/AcademySoftwareFoundation/MaterialX/blob/main/documents/Specification/MaterialX.Specification.md#mtlx-file-format-definition; https://github.com/AcademySoftwareFoundation/MaterialX/pull/2233/commits/6182c[PII_REDACTED]6a30d148ab531d81198686dc5; https://github.com/AcademySoftwareFoundation/MaterialX/releases/tag/v1.39.3
CVE: CVE-2025-54564
Published: 2025-08-01
Description: uploadsm in ChargePoint Home Flex 5.5.4.13 does not validate a user-controlled string for bz2 decompression, which allows command execution as the nobody user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-77
References: https://github.com/koharin/CVE/blob/main/CVE-2025-54564
CVE: CVE-2025-54574
Published: 2025-08-01
Description: Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://github.com/squid-cache/squid/commit/a27bf4b84da23594150c7a86a23435df0b35b988; https://github.com/squid-cache/squid/releases/tag/SQUID_6_4; https://github.com/squid-cache/squid/security/advisories/GHSA-w4gv-vw3f-29g3
CVE: CVE-2025-54590
Published: 2025-08-01
Description: webfinger.js is a TypeScript-based WebFinger client that runs in both browsers and Node.js environments. In versions 2.8.0 and below, the lookup function accepts user addresses for account checking. However, the ActivityPub specification requires preventing access to localhost services in production. This library does not prevent localhost access, only checking for hosts that start with "localhost" and end with a port. Users can exploit this by creating servers that send GET requests with controlled host, path, and port parameters to query services on the instance's host or local network, enabling blind SSRF attacks. This is fixed in version 2.8.1.
CWE: CWE-918
References: https://github.com/silverbucket/webfinger.js/commit/b5f2f2c957297d25f4d76072963fccaee2e3095a; https://github.com/silverbucket/webfinger.js/releases/tag/v2.8.1; https://github.com/silverbucket/webfinger.js/security/advisories/GHSA-8xq3-w9fx-74rv
CVE: CVE-2025-54593
Published: 2025-08-01
Description: FreshRSS is a free, self-hostable RSS aggregator. In versions 1.26.1 and below, an authenticated administrator user can execute arbitrary code on the FreshRSS server by modifying the update URL to one they control, and gain code execution after running an update. After successfully executing code, user data including hashed passwords can be exfiltrated, the instance can be defaced when file permissions allow. Malicious code can be inserted into the instance to steal plaintext passwords, among others. This is fixed in version 1.26.2.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://github.com/FreshRSS/FreshRSS/commit/dbdadbb4107878d9233f635c31a88afe45957101; https://github.com/FreshRSS/FreshRSS/pull/7477; https://github.com/FreshRSS/FreshRSS/releases/tag/1.26.2
CVE: CVE-2025-54595
Published: 2025-08-01
Description: Pearcleaner is a free, source-available and fair-code licensed mac app cleaner. The PearcleanerHelper is a privileged helper tool bundled with the Pearcleaner application. It is registered and activated only after the user approves a system prompt to allow privileged operations. Upon approval, the helper is configured as a LaunchDaemon and runs with root privileges. In versions 4.4.0 through 4.5.1, the helper registers an XPC service (com.alienator88.Pearcleaner.PearcleanerHelper) and accepts unauthenticated connections from any local process. It exposes a method that executes arbitrary shell commands. This allows any local unprivileged user to escalate privileges to root once the helper is approved and active. This issue is fixed in version 4.5.2.
CVSS Score: 7.3 (HIGH)
CWE: CWE-78, CWE-269
References: https://github.com/alienator88/Pearcleaner/commit/69afadfa95791cb998118ca35c227007b230b984; https://github.com/alienator88/Pearcleaner/issues/278; https://github.com/alienator88/Pearcleaner/releases/tag/4.5.2
CVE: CVE-2025-5999
Published: 2025-08-01
Description: A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s token privileges to Vault’s root policy. Fixed in Vault Community Edition 1.20.0 and Vault Enterprise 1.20.0, 1.19.6, 1.18.11 and 1.16.22.
CVSS Score: 7.2 (HIGH)
CWE: CWE-266
References: https://discuss.hashicorp.com/t/hcsec-2025-13-vault-root-namespace-operator-may-elevate-token-privileges/76032
CVE: CVE-2025-6000
Published: 2025-08-01
Description: A privileged Vault operator within the root namespace with write permission to {{sys/audit}} may obtain code execution on the underlying host if a plugin directory is set in Vault’s configuration. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-94
References: https://discuss.hashicorp.com/t/hcsec-2025-14-privileged-vault-operator-may-execute-code-on-the-underlying-host/76033
CVE: CVE-2025-6004
Published: 2025-08-01
Description: Vault and Vault Enterprise’s (“Vault”) user lockout feature could be bypassed for Userpass and LDAP authentication methods. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-307
References: https://discuss.hashicorp.com/t/hcsec-2025-16-vault-userpass-and-ldap-user-lockout-bypass/76035
CVE: CVE-2025-6011
Published: 2025-08-01
Description: A timing side channel in Vault and Vault Enterprise’s (“Vault”) userpass auth method allowed an attacker to distinguish between existing and non-existing users, and potentially enumerate valid usernames for Vault’s Userpass auth method. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.
CVSS Score: 3.7 (LOW)
CWE: CWE-203
References: https://discuss.hashicorp.com/t/hcsec-2025-15-timing-side-channel-in-vault-s-userpass-auth-method/76034
CVE: CVE-2025-6014
Published: 2025-08-01
Description: Vault and Vault Enterprise’s (“Vault”) TOTP Secrets Engine code validation endpoint is susceptible to code reuse within its validity period. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-156
References: https://discuss.hashicorp.com/t/hcsec-2025-17-vault-totp-secrets-engine-code-reuse/76036
CVE: CVE-2025-6015
Published: 2025-08-01
Description: Vault and Vault Enterprise’s (“Vault”) login MFA rate limits could be bypassed and TOTP tokens could be reused. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-307
References: https://discuss.hashicorp.com/t/hcsec-2025-19-vault-login-mfa-bypass-of-rate-limiting-and-totp-token-reuse/76038
CVE: CVE-2025-6037
Published: 2025-08-01
Description: Vault and Vault Enterprise (“Vault”) TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as [+trusted certificate+|https://developer.hashicorp.com/vault/api-docs/auth/cert#certificate]. In this configuration, an attacker may be able to craft a malicious certificate that could be used to impersonate another user. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-295
References: https://discuss.hashicorp.com/t/hcsec-2025-18-vault-certificate-auth-method-did-not-validate-common-name-for-non-ca-certificates/76037
CVE: CVE-2025-8472
Published: 2025-08-01
Description: Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. User interaction is required to exploit this vulnerability in that the target must connect to a malicious Bluetooth device.

The specific flaw exists within the parsing of vCard data. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute arbitrary code in the context of root. Was ZDI-CAN-26316.
CVSS Score: 7.4 (HIGH)
CWE: CWE-121
References: https://www.zerodayinitiative.com/advisories/ZDI-25-761/
CVE: CVE-2025-8473
Published: 2025-08-01
Description: Alpine iLX-507 UPDM_wstpCBCUpdStart Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the UPDM_wstpCBCUpdStart function. The issue results from the lack of proper validation of user-supplied data before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-26317.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-78
References: https://www.zerodayinitiative.com/advisories/ZDI-25-762/
CVE: CVE-2025-8474
Published: 2025-08-01
Description: Alpine iLX-507 CarPlay Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the implementation of the Apple CarPlay protocol. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-26318.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-121
References: https://www.zerodayinitiative.com/advisories/ZDI-25-763/
CVE: CVE-2025-8475
Published: 2025-08-01
Description: Alpine iLX-507 AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. User interaction is required to exploit this vulnerability in that the target must connect to a malicious Bluetooth device.

The specific flaw exists within the implementation of the AVRCP protocol. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-26321.
CVSS Score: 7.4 (HIGH)
CWE: CWE-121
References: https://www.zerodayinitiative.com/advisories/ZDI-25-764/
CVE: CVE-2025-8476
Published: 2025-08-01
Description: Alpine iLX-507 TIDAL Improper Certificate Validation Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the TIDAL music streaming application. The issue results from improper certificate validation. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-26322.
CVSS Score: 8.0 (HIGH)
CWE: CWE-295
References: https://www.zerodayinitiative.com/advisories/ZDI-25-765/
CVE: CVE-2025-8477
Published: 2025-08-01
Description: Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Alpine iLX-507 devices. User interaction is required to exploit this vulnerability in that the target must connect to a malicious Bluetooth device.

The specific flaw exists within the parsing of vCard data. The issue results from the lack of proper validation of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-26324.
CVSS Score: 7.4 (HIGH)
CWE: CWE-121
References: https://www.zerodayinitiative.com/advisories/ZDI-25-767/
CVE: CVE-2025-8480
Published: 2025-08-01
Description: Alpine iLX-507 Command Injection Remote Code Execution. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the Tidal music streaming application. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-26357.
CVSS Score: 8.0 (HIGH)
CWE: CWE-22
References: https://www.zerodayinitiative.com/advisories/ZDI-25-766/
CVE: CVE-2012-10022
Published: 2025-08-01
Description: Kloxo versions 6.1.12 and earlier contain two setuid root binaries—lxsuexec and lxrestart—that allow local privilege escalation from uid 48. The lxsuexec binary performs a uid check and permits execution of arbitrary commands as root if the invoking user matches uid 48. This flaw enables attackers with Apache-level access to escalate privileges to root without authentication.
CWE: CWE-269
References: https://github.com/KloxoNGCommunity/kloxo; https://kloxo.org/; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/local/kloxo_lxsuexec.rb
CVE: CVE-2013-10044
Published: 2025-08-01
Description: An authenticated SQL injection vulnerability exists in OpenEMR ≤ 4.1.1 Patch 14 that allows a low-privileged attacker to extract administrator credentials and subsequently escalate privileges. Once elevated, the attacker can exploit an unrestricted file upload flaw to achieve remote code execution, resulting in full compromise of the application and its host system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-434, CWE-434
References: https://github.com/openemr/openemr; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/openemr_sqli_privesc_upload.rb; https://www.exploit-db.com/exploits/28329