CVE-2025-34102
BaseFortify
Publication date: 2025-07-10
Last updated on: 2025-07-15
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| crypttech | cryptolog | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-306 | The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. |
| CWE-89 | The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data. |
| CWE-20 | The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. |
| CWE-78 | The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a remote code execution issue in the PHP version of CryptoLog, which has been discontinued since 2009. It involves a chained exploitation of two flaws: first, an unauthenticated attacker exploits a SQL injection vulnerability in login.php to bypass authentication. Then, using the authenticated session, the attacker exploits a command injection vulnerability in logshares_ajax.php by injecting commands via the lsid POST parameter. This allows the attacker to execute arbitrary operating system commands and gain shell access as the web server user.
How can this vulnerability impact me? :
An attacker can remotely execute arbitrary code on the affected server without any authentication, gaining shell access as the web server user. This can lead to full compromise of the server, unauthorized access to sensitive data, disruption of services, and potential use of the server as a pivot point for further attacks.