Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-5178

Realce Tecnologia Queue Ticket Kiosk Image File ajax.php unrestricted upload

Description

A vulnerability classified as critical has been found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. Affected is an unknown function of the file /adm/ajax.php of the component Image File Handler. The manipulation of the argument files[] leads to unrestricted upload. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Realce Tecnologia Queue Ticket Kiosk

  • 20250517affected

References