CVE-2025-15067
Unrestricted File Upload in Innorix WP Enables Remote Code Execution
Publication date: 2025-12-29
Last updated on: 2025-12-29
Assigner: FSI
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| innorix | wp | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-434 | The product allows the upload or transfer of dangerous file types that are automatically processed within its environment. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an Unrestricted Upload of File with Dangerous Type in Innorix WP. It allows an attacker to upload a web shell to the web server if the "exam" directory exists under the product installation directory. This means malicious files can be uploaded without proper restrictions, potentially leading to unauthorized control over the server.
How can this vulnerability impact me? :
The vulnerability can lead to an attacker gaining unauthorized access to the web server by uploading a web shell. This can result in compromise of the server's confidentiality and integrity, allowing the attacker to execute arbitrary code or commands, potentially leading to data breaches or further attacks.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by checking if the "exam" directory exists under the Innorix WP installation directory (e.g., innorix/exam) and by scanning for unauthorized web shell files uploaded to the web server. Commands to detect this may include searching for suspicious files in the "exam" directory using commands like `find /path/to/innorix/exam -type f -name '*.php'` or other web shell file extensions. Additionally, monitoring web server logs for unusual POST requests to the "exam" directory can help identify exploitation attempts.
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include removing or restricting access to the "exam" directory under the Innorix WP installation, disabling file uploads to this directory, and applying strict validation and filtering on uploaded files to prevent dangerous file types. Additionally, monitoring and blocking suspicious upload attempts and applying any available patches or updates from the vendor are recommended.