{"id":"CVE-2025-52207","aliases":["EUVD-2025-19422","GHSA-6578-p64m-wjxr"],"status":"published","title":"PBXCoreREST/Controllers/Files/PostController.php in MikoPBX through 2024.1.114 allows uploading a...","description":"PBXCoreREST/Controllers/Files/PostController.php in MikoPBX through 2024.1.114 allows uploading a PHP script to an arbitrary directory.","severity":{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.01663,"percentile":0.769,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-23"],"published":"2025-06-27T00:00:00Z","modified":"2026-10-28T02:31:07Z","exploits":[{"source":"nuclei","id":"CVE-2025-52207","title":"MikoPBX - Unrestricted File Upload","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-52207.yaml"}],"products":[{"vendor":"miko","product":"mikopbx"}],"references":[{"url":"https://www.mikopbx.com/","tags":["web"]},{"url":"https://github.com/mikopbx/Core/commit/3ee785429d3f1b33c9ab387ef4221127c9b8c5f3","tags":["fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-52207","tags":["advisory"]},{"url":"https://www.mikopbx.com"},{"url":"https://github.com/advisories/GHSA-6578-p64m-wjxr"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/52xxx/CVE-2025-52207.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-52207","description":"PBXCoreREST/Controllers/Files/PostController.php in MikoPBX through 2024.1.114 allows uploading a PHP script to an arbitrary directory.","status":"published","published":"2025-06-27T00:00:00Z","modified":"2025-06-27T18:35:52.191Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L","level":"critical","assessor":"cna"}],"cwes":["CWE-23"],"updated_at":"2026-11-02T14:32:31.309974Z"}],"euvd":[{"id":"EUVD-2025-19422","description":"PBXCoreREST/Controllers/Files/PostController.php in MikoPBX through 2024.1.114 allows uploading a PHP script to an arbitrary directory.","status":"published","published":"2025-06-27T00:00:00Z","modified":"2025-06-27T18:35:52Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L","level":"critical"}],"updated_at":"2026-11-02T20:32:15.785343Z"}],"ghsa":[{"id":"GHSA-6578-p64m-wjxr","title":"PBXCoreREST/Controllers/Files/PostController.php in MikoPBX through 2024.1.114 allows uploading a...","description":"PBXCoreREST/Controllers/Files/PostController.php in MikoPBX through 2024.1.114 allows uploading a PHP script to an arbitrary directory.","status":"published","published":"2025-06-27T18:30:43Z","modified":"2025-06-27T18:30:50Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L","level":"critical"}],"cwes":["CWE-23"],"updated_at":"2026-11-02T15:02:51.611786Z"}],"nvd":[{"id":"CVE-2025-52207","description":"PBXCoreREST/Controllers/Files/PostController.php in MikoPBX through 2024.1.114 allows uploading a PHP script to an arbitrary directory.","status":"published","published":"2025-06-27T17:15:34.333Z","modified":"2026-06-17T09:36:19.95Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L","level":"critical","assessor":"secondary"}],"cwes":["CWE-23"],"updated_at":"2026-11-02T14:11:14.781314Z"}],"osv":[{"id":"CVE-2025-52207","description":"PBXCoreREST/Controllers/Files/PostController.php in MikoPBX through 2024.1.114 allows uploading a PHP script to an arbitrary directory.","status":"published","published":"2025-06-27T00:00:00Z","modified":"2026-10-28T02:31:07.993971229Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L","level":"critical"}],"cwes":["CWE-23"],"updated_at":"2026-11-02T15:44:50.45326Z"}]}}