Skip to content
CVE PROGRAM SOURCE RECORD9.2 Critical

CVE-2025-66250

Unauthenticated Arbitrary File Upload (status_contents.php)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Gridware

Description

Unauthenticated Arbitrary File Upload (status_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Allows unauthenticated arbitrary file upload via /var/tdf/status_contents.php.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter

Default version status: unaffected

  • 30affected
  • 50affected
  • 100affected
  • 300affected
  • 500affected
  • 1000affected
  • 2000affected
  • 3000affected
  • 3500affected
  • 6000affected
  • 7000affected

References