CVE-2025-6839CWE-912

Conjure Position Department Service Quality Evaluation System head.php eval backdoor

Medium · published June 29, 2025

CVSS v4.0
5.3
EPSS
0%
Percentile
23.7
In the wild
Unconfirmed
What it is

A vulnerability, which was classified as critical, has been found in Conjure Position Department Service Quality Evaluation System up to 1.0.11. Affected by this issue is the function eval of the file public/assets/less/bootstrap-less/mixins/head.php. The manipulation of the argument payload leads to backdoor. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00320 · 23.7th percentile
Weakness
CWE-912 · Hidden Functionality
Published
2025-06-29T01:31Z
EPSS history
Timeline
  • 29 JUN 01:31Z
    Conjure Position Department Service Quality Evaluation System head.php eval backdoor
    cvelistv5