CVE-2025-4561CWE-434

Kinfor KFOX - Arbitrary File Upload

High · published May 12, 2025

CVSS v4.0
8.7
EPSS
1%
Percentile
53.6
In the wild
Unconfirmed
What it is

The KFOX from KingFor has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privilege to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00727 · 53.6th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2025-05-12T06:44Z
EPSS history
Timeline
  • 12 MAY 06:44Z
    Kinfor KFOX - Arbitrary File Upload
    cvelistv5