CVE-2025-57692

> 文章来源: Exploit-DB

> 抓取时间: 202605040650

> 原文 ID: article_281

> 生成时间: 2026-05-05 14:18

基础信息

字段值 CVECVE-2025-57692 CVSS 估计9.0+ 漏洞类型command_injection, xss 受影响组件Piranha CMS 12.0

漏洞摘要

[webapps] Piranha CMS 12.0 - Stored XSS in Text Block

根因分析

command_injection, xss

攻击向量

详见原文

PoC / 关键代码

# Date: 2025-09-26
# Exploit Author: Chidubem Chukwu (Terminal Venom)
# LinkedIn : https://www.linkedin.com/in/chidubem-chukwu-20bb202a9?
# Vendor Homepage: https://piranhacms.org
# Software Link: https://github.com/PiranhaCMS/piranha.core/releases/tag/v12.0
# Version: 12.0
# Category: Web Applicati

修复建议

Exploit link: https://github.com/Saconyfx/security-advisories/blob/main/CVE-2025-57692/advisory.md

Semgrep 检测 Hint

- id: auto-hint-cve_2025_57692
  pattern: 'os.system($CMD)'
  message: "Potential command_injection - 参考 CVE-2025-57692"
  severity: WARNING
  languages: [python]

标签

command_injection, xss

*由 vuln_card_gen.py 自动生成，来源: Exploit-DB*

🤖 漏洞情报系统自动分析生成 · 2026-07-02