Aller au contenu
Se connecter
6.9 Moyenne

CVE-2025-8259 A vulnerability was identified in Vaelsys VaelsysV4 up to 5.1.0/5.4.0

Description

A vulnerability was identified in Vaelsys VaelsysV4 up to 5.1.0/5.4.0. Affected by this issue is the function execute_DataObjectProc of the file /grid/vgrid_server.php of the component Web interface. Such manipulation of the argument xajaxargs leads to os command injection. The attack can be executed remotely. The exploit is publicly available and might be used. Upgrading to version 5.1.1 and 5.4.1 can resolve this issue. It is suggested to upgrade the affected component.

Produits et versions touchés

Produit Versions touchées Corrigé en
Vaelsys 4.1.0 Pas de correctif indiqué
VaelsysV4 5.4.0 5.4.1
VaelsysV4 5.3 Pas de correctif indiqué
VaelsysV4 5.2 Pas de correctif indiqué
VaelsysV4 5.1 5.1 → 5.1.0 5.1.1
VaelsysV4 5.0 Pas de correctif indiqué

Autres CVE de Vaelsys

Les 4 CVE de Vaelsys →
CVE-2026-2952 A flaw has been found in Vaelsys 4.1.0 6.9 Moyenne CVE-2025-8261 A weakness has been identified in Vaelsys VaelsysV4 4.1.0 6.9 Moyenne CVE-2025-8260 A security flaw has been discovered in Vaelsys VaelsysV4 up to 5.1.0/5.4.0 2.3 Faible
Suivre cette CVE