Vulnerability Database

315,050

Total vulnerabilities in the database

CVE-2025-57516

OS Command injection vulnerability in PublicCMS PublicCMS-V5.202506.a, and PublicCMS-V5.202506.b allowing attackers to execute arbitrary commands via crafted DATABASE, USERNAME, or PASSWORD variables to the backupDB.bat file.

  • Published: Sep 29, 2025
  • Updated: Dec 24, 2025
  • CVE: CVE-2025-57516
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.2
  • AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
publiccms / publiccms 5.202506.a 5.202506.a.x
publiccms / publiccms 5.202506.b 5.202506.b.x