5.3
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Description
A vulnerability classified as critical has been found in Jingmen Zeyou Large File Upload Control up to 6.3. Affected is an unknown function of the file /index.jsp. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Basic Information
ID
CVE-2025-8203
Source
VulDB
Published
Jul 26, 2025 at 14:32
Modified
Jul 28, 2025 at 16:03
Affected Product
Vendor
Jingmen Zeyou
Product
Large File Upload Control
Version
6.0
Affected Versions
Jingmen Zeyou Large File Upload Control 6.0
Jingmen Zeyou Large File Upload Control 6.1
Jingmen Zeyou Large File Upload Control 6.2
Jingmen Zeyou Large File Upload Control 6.3
Jingmen Zeyou Large File Upload Control 6.1
Jingmen Zeyou Large File Upload Control 6.2
Jingmen Zeyou Large File Upload Control 6.3