VULNERABILITY INTELLIGENCE
CVE-2025-15067
CVSS score7.7 HIGH
EPSS probability0.14%
CISA KEVNot currently listed
Published2025-12-29
Last modified2026-10-07
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Description
Unrestricted Upload of File with Dangerous Type vulnerability in Innorix Innorix WP allows Upload a Web Shell to a Web Server.This issue affects Innorix WP from All versions If the "exam" directory exists under the directory where the product is installed (ex: innorix/exam)
Weakness classification
- 09832df1-09c1-45b4-8a85-16c601d30feb: CWE-434