Security Advisory

CVE-2025-5178

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-05-26 09:00:08

Last updated 2025-05-27 13:30:41

Assigner VulDB

State PUBLISHED

Description

A vulnerability classified as critical has been found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. Affected is an unknown function of the file /adm/ajax.php of the component Image File Handler. The manipulation of the argument files[] leads to unrestricted upload. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.

← Browse all CVEs View on cve.org ↗