CVE-2025-57642

HIGH

Tourism Management System 2.0 - Arbitrary Shell Upload

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2025-57642 has a selected CVSS score of 7.2 (high); EIP currently links 1 catalogued exploit.

Description

A Shell Upload vulnerability in Tourism Management System 2.0 allows an attacker to upload and execute arbitrary PHP shell scripts on the server, leading to remote code execution and unauthorized access to the system. This can result in the compromise of sensitive data and system functionality.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 10, 2025 · Source: CVE List

Proofs of concept

1

Catalogued exploits

ExploitDBTourism Management System 2.0 - Arbitrary Shell UploadExploitDB exploitby Debug SecurityStub1 file
ExploitDB
PoC details
Analysisdeepseek-v4-pro:cloud ·

Technical assessment

The artifact describes an open redirect vulnerability in the login process of Tourism Management System 2.0, not an arbitrary shell upload. It provides only steps to reproduce a redirect via a 'link' parameter, with no exploit code, scanner code, or substantive technical analysis of a shell upload.

Backdoor review

No backdoor observed in reviewed code

The supplied text describes a redirect vulnerability in Tourism Management System 2.0, not a shell upload. The steps instruct a user to visit a target site with a malicious URL in the 'link' parameter, which redirects after login. No backdoor, concealed executable, or operator-directed harm is present in the reviewed evidence.

ClassificationStub
Model confidence95%
AuthenticationRequired
LanguagesEnglish
Target softwareTourism Management System 2.0
Attack typesOpen Redirect
Evidence & reasoningClassification basis · observed behavior · safety review
Technical evidence

Classification basis and observed behavior

Classification basis

The artifact's title and CVE description claim an arbitrary shell upload vulnerability, but the provided content only describes an open redirect via the 'link' parameter in the login process. No exploit code, scanner code, or technical analysis of a shell upload is present. The artifact is materially incomplete relative to its stated purpose, making it a stub.

exploits/multiple/webapps/52433.txt:1-24

Requirements

  • Attacker must have a valid account on the target Tourism Management System instance.exploits/multiple/webapps/52433.txt:24

Observed behavior

  • The login page at index.php?user/login accepts a 'link' parameter. After successful login, the user is redirected to the URL specified in the 'link' parameter.exploits/multiple/webapps/52433.txt:20-24
Safety-review evidence

Behaviors behind the backdoor verdict

Observables

Vulnerability Description
Payload withheldThe mismatch between the title and the actual steps may indicate a documentation error, but the described behavior is a redirect, not a shell upload or backdoor.exploits/multiple/webapps/52433.txt:1exploits/multiple/webapps/52433.txt:20-24
Review boundaries

What the analysis did not establish

  • The artifact's title and CVE description claim an arbitrary shell upload vulnerability, but the file content only describes an open redirect. No shell upload code, scanner, or technical analysis is provided.
  • The evidence consists of a single text file with 24 lines; complete_artifact_coverage is true, so no additional files are available to resolve the discrepancy.
  • Only the text file 'exploits/multiple/webapps/52433.txt' was reviewed; no external resources, binaries, or referenced URLs were inspected.
  • The exploit title and CVE description mention shell upload, but the provided steps describe an open redirect; the actual exploit mechanism may differ from the reviewed text.
Model interpretation

This review is limited to the supplied PoC code and context. It does not assert that the code works or is safe to execute.

References

3