medium6.3
CVE-2025-1890
A vulnerability has been found in shishuocms 1.1 and classified as critical.
Impact
A vulnerability has been found in shishuocms 1.1 and classified as critical. This vulnerability affects the function handleRequest of the file src/main/java/com/shishuo/cms/action/manage/ManageUpLoadAction.java. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Shishuocms Project | Shishuocms | Version 1.1 |