CVE-2025-63228
critical · 9.8The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unauthenticated file upload vulnerability in the /upload_file.php endpoint. An attacker can exploit this by sending a crafted POST request with a malicious file (e.g., a PHP webshell) to the server. The uploaded file is stored in the /upload/ directory, enabling remote code execution and full system compromise.
9.8
CVSS
0.8%
EPSS (exploit prob.)
54th
EPSS percentile
2025-11-18
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-434
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| dbbroadcast | mozart_next_100_firmware | all versions |
| dbbroadcast | mozart_next_100 | all versions |
| dbbroadcast | mozart_next_1000_firmware | all versions |
| dbbroadcast | mozart_next_1000 | all versions |
| dbbroadcast | mozart_next_2000_firmware | all versions |
| dbbroadcast | mozart_next_2000 | all versions |
| dbbroadcast | mozart_next_30_firmware | all versions |
| dbbroadcast | mozart_next_30 | all versions |
| dbbroadcast | mozart_next_300_firmware | all versions |
| dbbroadcast | mozart_next_300 | all versions |
| dbbroadcast | mozart_next_3000_firmware | all versions |
| dbbroadcast | mozart_next_3000 | all versions |
| dbbroadcast | mozart_next_3500_firmware | all versions |
| dbbroadcast | mozart_next_3500 | all versions |
| dbbroadcast | mozart_next_50_firmware | all versions |
| dbbroadcast | mozart_next_50 | all versions |
| dbbroadcast | mozart_next_500_firmware | all versions |
| dbbroadcast | mozart_next_500 | all versions |
| dbbroadcast | mozart_next_6000_firmware | all versions |
| dbbroadcast | mozart_next_6000 | all versions |
| dbbroadcast | mozart_next_7000_firmware | all versions |
| dbbroadcast | mozart_next_7000 | all versions |
| dbbroadcast | mozart_dds_next_30_firmware | all versions |
| dbbroadcast | mozart_dds_next_30 | all versions |
| dbbroadcast | mozart_dds_next_50_firmware | all versions |
| dbbroadcast | mozart_dds_next_50 | all versions |
| dbbroadcast | mozart_dds_next_100_firmware | all versions |
| dbbroadcast | mozart_dds_next_100 | all versions |
| dbbroadcast | mozart_dds_next_300_firmware | all versions |
| dbbroadcast | mozart_dds_next_300 | all versions |
| dbbroadcast | mozart_dds_next_500_firmware | all versions |
| dbbroadcast | mozart_dds_next_500 | all versions |
| dbbroadcast | mozart_dds_next_1000_firmware | all versions |
| dbbroadcast | mozart_dds_next_1000 | all versions |
| dbbroadcast | mozart_dds_next_2000_firmware | all versions |
| dbbroadcast | mozart_dds_next_2000 | all versions |
| dbbroadcast | mozart_dds_next_3000_firmware | all versions |
| dbbroadcast | mozart_dds_next_3000 | all versions |
| dbbroadcast | mozart_dds_next_3500_firmware | all versions |
| dbbroadcast | mozart_dds_next_3500 | all versions |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2025-63228