Improper Access Controls in Juzaweb CMS Media Page
CVE-2025-5424
5.3MEDIUM
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2025-5424?
A vulnerability has been detected in Juzaweb CMS versions up to 3.4.2, where improper access controls exist on the Media Page component. This weakness allows an attacker to exploit the system remotely, potentially altering sensitive media files without appropriate authorization. Despite early disclosure, the vendor has not responded to the security findings, increasing the urgency for users to address this flaw to secure their applications.
Affected Version(s)
CMS 3.4.0
CMS 3.4.1
CMS 3.4.2
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.