CVE Feed

    Dashboard / CVE / CVE-2025-5406

    CVE-2025-5406

    A vulnerability, which was classified as critical, was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. Affected is an unknown function of the file /admin/posts.php?source=add_post. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.

    Published:Jun 1, 2025
    Last Modified:Nov 10, 2025
    EPS:Jun 1, 2025
    EPSS Score:0.00039
    CVSS Score:6.3

    Affected Products

    Vendor
    Chaitak-gorai
    Product
    Blogbook

    Exploits

    https://github.com/rllvusgnzm98/Report/blob/main/blogbook/BlogBook%20posts.php%20add_post%20post_image%20Parameter%20Unrestricted%20Upload.md

    Related CVEs

    CVE-2025-5407 (CVSS 4.8) — A vulnerability has been found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513 and cl…
    CVE-2025-5405 (CVSS 5.1) — A vulnerability, which was classified as problematic, has been found in chaitak-gorai Blogbook up to 92f5cf90f…
    CVE-2025-5404 (CVSS 5.3) — A vulnerability classified as problematic was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe095…
    CVE-2025-5403 (CVSS 5.3) — A vulnerability classified as critical has been found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0…
    CVE-2025-5402 (CVSS 6.9) — A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has bee…
    CVE-2025-5401 (CVSS 6.9) — A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has bee…
    CVE-2025-5400 (CVSS 6.9) — A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has bee…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High