ajansha/CVE-2025-55903

GitHubRepository PoCWriteup

PoC files

1 file

File viewing is interactive and short-lived. Downloads are password-protected ZIP archives using password eip.

GitHub
Analysisdeepseek-v4-pro:cloud ·

Technical assessment

A technical writeup describing a stored HTML injection vulnerability (CVE-2025-55903) in PerfexCRM. The document details the vulnerability, affected components, impact, and step-by-step reproduction instructions, but contains no executable exploit or scanner code.

Backdoor review

No backdoor observed in reviewed code

The artifact is a single README.md file documenting CVE-2025-55903, a stored HTML injection vulnerability in PerfexCRM. The file contains no executable code, no obfuscated payloads, and no instructions for the reader to perform actions that would compromise their own system. All described steps are standard vulnerability reproduction procedures against a remote target application.

ClassificationWriteup
Model confidence100%
AuthenticationRequired
LanguagesMarkdown
Target softwarePerfexCRM
Attack typesHTML injection
Evidence & reasoningClassification basis · observed behavior · safety review
Technical evidence

Classification basis and observed behavior

Classification basis

The artifact is a README.md file that provides a detailed technical analysis of CVE-2025-55903, including vulnerability description, impact, and manual reproduction steps. It contains no executable code, scripts, or automated scanning logic; the 'PoC Steps' are purely descriptive instructions for a human operator. This constitutes a writeup.

README.md:1-174

Requirements

  • Authenticated user with invoice creation permissions in PerfexCRMREADME.md:86-87

Observed behavior

  • Describes injecting HTML payloads into invoice description and billing address fields, which are stored and rendered in client-facing emails and PDFs without escaping.README.md:96-128
Safety-review evidence

Behaviors behind the backdoor verdict

Observables

Vulnerability Documentation
CVE-2025-55903The entire file describes a stored HTML injection vulnerability in PerfexCRM, including reproduction steps, impact, and mitigation.README.md:1-174
Review boundaries

What the analysis did not establish

  • Only one file (README.md) was provided; no source code, exploit scripts, or scanner code was included.
  • The artifact's own analysis routing classified it as 'NO_POC_CODE_IDENTIFIED'.
  • Only the README.md file was provided; no other repository files were inspected.
  • Binary files were flagged but not analyzed; none were identified in the artifact inventory.
Model interpretation

This review is limited to the supplied PoC code and context. It does not assert that the code works or is safe to execute.

Linked vulnerabilities

1