08CMS Novel System CVE-2025-15250

Q: What is the CVSS score of CVE-2025-15250?

CVE-2025-15250 has a CVSS 4.0 base score of 2.0 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

LOW

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') (CWE-74)

2025-12-30 cna@vuldb.com

PHP Information Disclosure

2.0

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.0 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

4.7 MEDIUM

Admin-panel-only template injection requires high privilege (PR:H); network reachable with low complexity; no scope change; limited CIA impact per provided CVSS 4.0 data.

3.1 AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

4.0 AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 24, 2026 - 08:41 vuln.today

DescriptionCVE.org

A security vulnerability has been detected in 08CMS Novel System up to 3.4. This issue affects some unknown processing of the file admina/mtpls.inc.php of the component Template Handler. The manipulation leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

AnalysisAI

Code injection in 08CMS Novel System (versions up to 3.4) allows remote authenticated administrators to inject and execute arbitrary code via the Template Handler component (admina/mtpls.inc.php). The vulnerability requires high privileges to exploit, limiting its scope to users with admin-level access to the CMS. A public proof-of-concept exploit has been disclosed, though EPSS stands at 0.06% (17th percentile), indicating no widespread opportunistic exploitation has been observed. No CISA KEV listing confirms active exploitation at time of analysis.

Technical ContextAI

08CMS is a PHP-based novel/content management system. The vulnerable component is the Template Handler, accessed via the admin-facing file admina/mtpls.inc.php. CWE-74 (Injection) covers the root cause class: user-controlled input is passed into a code execution context without sufficient sanitization, allowing template directives or PHP constructs to be injected and evaluated server-side. This class of vulnerability commonly arises in PHP CMS platforms that expose template editing or file management functions in their admin panels without strict output encoding or allowlisting of permissible template syntax. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:H) confirms the attack is network-reachable but strictly requires high-privilege authentication, consistent with an admin-panel-only template feature.

Affected ProductsAI

08CMS Novel System versions up to and including 3.4 are affected. The specific vulnerable file is admina/mtpls.inc.php within the Template Handler component. No CPE string was provided in the available intelligence. The PoC and vulnerability details are documented at https://gitee.com/keneny/cve/issues/ID3DEM and corroborated by VulDB entry https://vuldb.com/?id.338640 (CTI: https://vuldb.com/?ctiid.338640). No additional vendor advisory URL was identified in the reference set.

RemediationAI

No vendor-released patch with a confirmed fixed version has been identified in the available data. The primary remediation recommendation is to update 08CMS Novel System to a version beyond 3.4 if a patched release becomes available from the vendor. In the absence of a confirmed patch, restrict access to the admin panel (admina/) at the network or web server level to trusted IP ranges only, eliminating the network attack surface even for authenticated users. Additionally, audit and remove any admin accounts that do not require template-editing privileges, reducing the attack surface further. Disabling template editing functionality within the CMS configuration, if supported, would directly mitigate this specific code path. Monitor the VulDB entry (https://vuldb.com/?id.338640) and the Gitee issue (https://gitee.com/keneny/cve/issues/ID3DEM) for patch availability updates. Note that restricting network access to the admin panel may affect legitimate remote administration workflows.