CVE-2025-1465: Code Injection
First published: Wed Feb 19 2025(Updated: )
A vulnerability, which was classified as problematic, was found in lmxcms 1.41. Affected is an unknown function of the file db.inc.php of the component Maintenance. The manipulation leads to code injection. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Lmxcms | ||
| Lmxcms | =1.41 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-1465?
CVE-2025-1465 is classified as problematic due to its ability to allow remote code injection.
How does CVE-2025-1465 occur?
CVE-2025-1465 occurs through a vulnerability in an unknown function of the db.inc.php file within the Maintenance component of lmxcms 1.41.
Can CVE-2025-1465 be exploited remotely?
Yes, CVE-2025-1465 can be exploited remotely, posing a significant security risk.
What impact does CVE-2025-1465 have on systems?
The impact of CVE-2025-1465 includes potential code injection, which can lead to unauthorized access and system compromise.
What steps can be taken to mitigate CVE-2025-1465?
To mitigate CVE-2025-1465, it is essential to update to a secure version of lmxcms or implement appropriate security measures to patch the vulnerability.
- agent/references
- agent/weakness
- agent/source
- agent/description
- agent/first-publish-date
- agent/type
- agent/author
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/tags
- agent/last-modified-date
- agent/softwarecombine
- agent/severity
- agent/event
- collector/nvd-api
- source/NVD
- vendor/lmxcms
- canonical/lmxcms
- version/lmxcms/1.41