File Upload Vulnerability in SMG Software Information Portal
CVE-2025-5243

10CRITICAL

Key Information:

Vendor

Smg Software

Status
Information Portal
Vendor
CVE Published:
24 July 2025

What is CVE-2025-5243?

The SMG Software Information Portal is susceptible to a vulnerability that enables an attacker to upload files of dangerous types. This weakness allows for code injection and the potential to upload a web shell to a web server, which can lead to unauthorized access and system compromise. The flaw arises from improper handling of special elements during OS command execution, putting users at risk if they do not update before the specified version.

Affected Version(s)

Information Portal 0 < 13.06.2025

References

https://www.usom.gov.tr/bildirim/tr-25-0174
third-party-advisory

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ersin ERENLER
NSC Informatics Inc.
.
CVE-2025-5243 : File Upload Vulnerability in SMG Software Information Portal