CVE-2025-14522

MEDIUM

baowzh hfly < 2016-05-11 - Unrestricted File Upload via imgFile Parameter

Title source: llm

Description

A vulnerability was detected in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c. The impacted element is an unknown function of the file /Public/Kindeditor/php/upload_json.php. Performing manipulation of the argument imgFile results in unrestricted upload. It is possible to initiate the attack remotely. The exploit is now public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.

References (4)

Core 4

Core References

Third Party Advisory, VDB Entry vdb-entry technical-description

https://vuldb.com/?id.335860

Permissions Required, VDB Entry signature permissions-required

https://vuldb.com/?ctiid.335860

Third Party Advisory, VDB Entry third-party-advisory

https://vuldb.com/?submit.702950

Broken Link broken-link exploit

https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/PHP-based%20travel%20website-CMS/PHP-based%20travel%20website-CMS%20upload_json.php%20imgFile%20XSS-File-Upload.md

Scores

CVSS v3 6.3

EPSS 0.0026

EPSS Percentile 17.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-284 CWE-434

Status published

Products (1)

baowzh/hfly < 2016-05-11

Published Dec 11, 2025

Tracked Since Feb 18, 2026