CVE-2025-9402

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

A vulnerability was found in HuangDou UTCMS 9. This issue affects some unknown processing of the file app/modules/ut-frame/admin/update.php of the component Config Handler. Performing manipulation of the argument UPDATEURL results in server-side request forgery. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-918

Affected software

Vendor	Product	Versions
HuangDou	UTCMS	9

References

https://github.com/August829/Yu/blob/main/20250811_1.mdBroken Link
https://github.com/August829/Yu/blob/main/20250811_1.md#pocBroken Link
https://vuldb.com/?ctiid.321238Permissions Required, VDB Entry
https://vuldb.com/?id.321238Third Party Advisory, VDB Entry
https://vuldb.com/?submit.632537Third Party Advisory, VDB Entry

Timeline

Published: Aug 25, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-94035.5A vulnerability was determined in jqlang jq up to 1.6. Impacted is the function run_jq_tests of the file jq_test.c of the component JSON Par CVE-2025-94045.4A vulnerability was identified in Scada-LTS up to 2.7.8.1. The affected element is an unknown function of the file /pointHierarchySLTS of th CVE-2025-94055.3A security flaw has been discovered in Open5GS up to 2.7.5. The impacted element is the function gmm_state_exception of the file src/amf/gmm CVE-2025-94069.8A weakness has been identified in xuhuisheng lemon up to 1.13.0. This affects the function uploadImage of the file CmsArticleController.java CVE-2025-94075.4A flaw has been found in mtons mblog up to 3.5.0. Affected by this vulnerability is an unknown functionality of the file /settings/profile. CVE-2025-94088.1System call entry on Cortex M (and possibly R and A, but I think not) has a race which allows very practical privilege escalation for malici CVE-2025-94096.5A security flaw has been discovered in lostvip-com ruoyi-go up to 2.1. Impacted is the function DownloadTmp/DownloadUpload of the file modul CVE-2025-94109.8A weakness has been identified in lostvip-com ruoyi-go up to 2.1. The affected element is the function SelectListByPage of the file modules/CVE-2025-94119.8A security vulnerability has been detected in lostvip-com ruoyi-go up to 2.1. The impacted element is the function SelectPageList of the fil CVE-2025-94129.8A vulnerability was detected in lostvip-com ruoyi-go up to 2.1. This affects the function SelectListByPage of the file modules/system/dao/Di CVE-2025-94139.8A flaw has been found in lostvip-com ruoyi-go up to 2.1. This impacts the function SelectListByPage of the file modules/system/system_router CVE-2025-94144.9A vulnerability was found in kalcaddle kodbox 1.61. Affected by this vulnerability is an unknown functionality of the file /?explorer/upload