Exploit for CVE-2025-10353

githubexploit · 2026-02-23

Description

A proof-of-concept exploit for vulnerability 2025-10353 is described.

Parametermcsdetail_img · request body

Pathmelis/MelisCmsSlider/MelisCmsSliderDetails/saveDetailsForm

File upload leading to remote code execution via multipart form field mcsdetail_img in MelisCmsSliderDetails/saveDetailsForm

9.3

HIGH SEVERITY

Version 4.0

VectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N

Attack Vector:NETWORK

Attack Complexity:LOW

Attack Requirements:NONE

Privileges Required:NONE

User Interaction:NONE

88%confidence this exploit runs

Based on 2 file(s) in the source

2.5%higher than 83.1% of all CVEs

Updated 2026-08-09

Modified:2026-02-23 17:54

Last Seen:2026-02-23 18:01

Reporter:tempiltin

Last commit:2026-02-23

README2 lines

## https://sploitus.com/exploit?id=504446BC-DDE0-571A-BFEA-A0C5F2D16CC6
# CVE-2025-10353-POC