CVE-2025-11959

HighCVSS 8.1/10Last modified Oct 18, 2026

Description

Files or Directories Accessible to External Parties, Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Premierturk Information Technologies Inc. Excavation Management Information System allows Footprinting, Functionality Misuse.

This issue affects Excavation Management Information System: before v.10.2025.01.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-359CWE-552

Affected software

VendorProductVersions
Premierturk Information Technologies Inc.Excavation Management Information System< v.10.2025.01

References

Timeline

Published
Nov 11, 2025
Last modified
Oct 18, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-11965.4A vulnerability, which was classified as problematic, was found in code-projects Real Estate Property Management System 1.0. Affected is an CVE-2025-119606.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Aryom Software High Technology CVE-2025-119611.9pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argCVE-2025-119627.3Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in DivvyDrive Information TechnoloCVE-2025-119635.4Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Saysis Computer Systems Trade LCVE-2025-119641.9On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents usinCVE-2025-119657.5In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], a StaticHandler configuration for restricting access to hidden files fails toCVE-2025-119666.4In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], when "directory listing" is enabled, file and directory names are inserted inCVE-2025-119677.2The Mail Mint plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the process_contact_attribCVE-2025-119699.4The System REST APIs do not correctly enforce access control mechanisms, allowing users with lower privilege roles to execute administrativeCVE-2025-11977.5A vulnerability has been found in code-projects Real Estate Property Management System 1.0 and classified as critical. Affected by this vulnCVE-2025-119704.4The Emplibot – AI Content Writer with Keyword Research, Infographics, and Linking | SEO Optimized | Fully Automated plugin for WordPress is