WeGIA < 3.4.11 - Remote Code Execution via Unrestricted PHP File Upload
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2025-58159. PoCs published by exploitintel.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2025-10622, an OS command injection vulnerability in Foreman (3.12.0-3.16.0). The exploit leverages client-side-only validation of transpiler settings to execute arbitrary commands via the Foreman process user.
Description
WeGIA is a Web manager for charitable institutions. Prior to version 3.4.11, a remote code execution vulnerability was identified, caused by improper validation of uploaded files. The application allows an attacker to upload files with arbitrary filenames, including those with a .php extension. Because the uploaded file is written directly to disk without adequate sanitization or extension restrictions, a spreadsheet file followed by PHP code can be uploaded and executed on the server, leading to arbitrary code execution. This is due to insufficient mitigation of CVE-2025-22133. This issue has been patched in version 3.4.11.
Exploits (1)
This repository contains a functional exploit for CVE-2025-10622, an OS command injection vulnerability in Foreman (3.12.0-3.16.0). The exploit leverages client-side-only validation of transpiler settings to execute arbitrary commands via the Foreman process user.
References (1)
Related Analysis
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
