CVE-2025-4067

MEDIUM Year: 2025
CVSS v3 Score
5.3
Medium
CVSS v2 Score
5.0
Medium
Weakness Type
CWE-266
View all →

Vulnerability Description

A vulnerability classified as critical has been found in ScriptAndTools Online-Travling-System 1.0. Affected is an unknown function of the file /admin/viewpackage.php. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Related Vulnerabilities

CVE-2023-26280

MEDIUM
CVSS:5.3(Medium)

IBM Jazz Foundation 7.0.2 and 7.0.3 could allow a user to change their dashboard using a specially crafted HTTP request due to improper access control.

CWE-2662023

CVE-2023-3300

MEDIUM
CVSS:5.3(Medium)

HashiCorp Nomad and Nomad Enterprise 0.11.0 up to 1.5.6 and 1.4.1 HTTP search API can reveal names of available CSI plugins to unauthenticated users or users without the plugin:read policy. Fixed in 1...

CWE-2662023

CVE-2023-7270

MEDIUM
CVSS:5.3(Medium)

An issue was discovered in SoftMaker Office 2024 / NX before revision 1214 and SoftMaker FreeOffice 2014 before revision 1215. FreeOffice 2021 is also affected, but won't be fixed. The SoftMaker Offic...

CWE-2662023

CVE-2024-11306

MEDIUM
CVSS:5.3(Medium)

A vulnerability, which was classified as critical, has been found in Altenergy Power Control Software up to 20241108. This issue affects some unknown processing of the file /index.php/display/database...

CWE-2662024

CVE-2024-12347

MEDIUM
CVSS:5.3(Medium)

A vulnerability was found in Guangzhou Huayi Intelligent Technology Jeewms up to 1.0.0 and classified as critical. This issue affects some unknown processing of the file /jeewms_war/webpage/system/dru...

CWE-2662024

CVE-2024-12901

MEDIUM
CVSS:5.3(Medium)

A vulnerability classified as critical was found in FoxCMS up to 1.2. Affected by this vulnerability is an unknown functionality of the file /app/api/controller/Site.php of the component API Endpoint....

CWE-2662024