OS Command Injection Vulnerability in Fujian Kelixun Filesystem Handler
CVE-2025-5106
Key Information:
Badges
What is CVE-2025-5106?
A vulnerability in the Fujian Kelixun Communication Platform (version 1.0) has been identified, specifically within the 'fax_view.php' file. The issue is rooted in improper handling of the 'fax_file' argument, which permits an attacker to execute arbitrary OS commands through crafted requests. This flaw exposes the system to potential remote exploitation, as attackers can manipulate inputs without proper authentication or authorization checks. The vendor was notified of this vulnerability but has not responded to address the issue, raising concerns about the security posture of the affected product.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Kelixun 1.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V4
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved