Critical · published November 26, 2025
🚨 An uncensored file upload vulnerability opens a door wide for attackers on multiple Mozart FM Transmitter versions! 🔥 Think of it like a kitchen where anyone can sneak in and toss in any ingredient without checking—one unguarded delivery could spoil the whole feast! An attacker could upload malicious files, which may then be executed, potentially leading to unauthorized access or further exploitation in your network. This could result in data leaks, system corruption, or even a full takeover of your devices—an absolute disaster waiting to happen!
Think of it like a kitchen where anyone can sneak in and toss in any ingredient without checking—one unguarded delivery could spoil the whole feast! The flaw resides in the 'status_contents.php' file, which allows unauthenticated users to upload any file. Since the system does not validate the file type or check permissions, this opens the door for arbitrary code execution.
An attacker could upload malicious files, which may then be executed, potentially leading to unauthorized access or further exploitation in your network. This could result in data leaks, system corruption, or even a full takeover of your devices—an absolute disaster waiting to happen! Immediately patch to the latest version of Mozart FM Transmitter to safeguard against this vulnerability. Implement strict file validation checks in your code to ensure only permitted file types can be uploaded. Regularly review server configurations and monitor for suspicious file uploads. You've got this! With these steps, you'll fortify your defenses and keep your systems safe. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| dbbroadcast/mozart_next_100_firmware | all versions | — |
| dbbroadcast/mozart_next_1000_firmware | all versions | — |
| dbbroadcast/mozart_next_2000_firmware | all versions | — |
| dbbroadcast/mozart_next_30_firmware | all versions | — |
| dbbroadcast/mozart_next_300_firmware | all versions | — |
| dbbroadcast/mozart_next_3000_firmware | all versions | — |
| dbbroadcast/mozart_next_3500_firmware | all versions | — |
| dbbroadcast/mozart_next_50_firmware | all versions | — |
| dbbroadcast/mozart_next_500_firmware | all versions | — |
| dbbroadcast/mozart_next_6000_firmware | all versions | — |
| dbbroadcast/mozart_next_7000_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_30_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_50_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_100_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_300_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_500_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_1000_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_2000_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_3000_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_3500_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_6000_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_7000_firmware | all versions | — |