CVE-2025-15143: EyouCMS Backend Template Management FilemanagerLogic.php sql injection
A security flaw has been discovered in EyouCMS up to 1.7.6. The affected element is an unknown function of the file /application/admin/logic/FilemanagerLogic.php of the component Backend Template Management. The manipulation of the argument content results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15143?
CVE-2025-15143 has been classified with a high severity level due to its potential for SQL injection vulnerabilities.
How do I fix CVE-2025-15143?
To fix CVE-2025-15143, it is recommended to upgrade EyouCMS to the latest version beyond 1.7.6 where the vulnerability has been patched.
What is affected by CVE-2025-15143?
CVE-2025-15143 affects EyouCMS versions up to and including 1.7.6, specifically in the Backend Template Management component.
How does CVE-2025-15143 exploit vulnerabilities?
CVE-2025-15143 exploits vulnerabilities through SQL injection via unsafe manipulation of parameters within the FilemanagerLogic.php file.
Who should be concerned about CVE-2025-15143?
Organizations using EyouCMS up to version 1.7.6 should be concerned about CVE-2025-15143 and take immediate action to mitigate risks.