CNNVD-202511-973 Information

CNNVD ID

CNNVD-202511-973

CVE-2025-12868

  • CNNVD Published: 2025-11-10

Description (Chinese)

CyberTutor New Site Server是中国台湾网韵资讯(CyberTutor)公司的一个网站建站系统。 CyberTutor New Site Server存在安全漏洞,该漏洞源于使用客户端身份验证,可能导致未经验证的远程攻击者修改前端代码并获得管理员权限。

Description (English)

CyberTutor New Site Server is a web site-building system of CyberTutor, China. There is a security loophole in CyberTutor New Site Server, which stems from the use of client identification, which may result in uncertified remote assailants modifying front-end codes and obtaining administrator privileges.

Hazard Level

Low

Vulnerability Type

其他

Affected Vendor

网韵资讯

Published

2025-11-10

Last Modified

2026-02-24

References

https://www.twcert.org.tw/en/cp-139-10492-84a10-2.html https://www.twcert.org.tw/tw/cp-132-10493-bf807-1.html

Patch

https://www.cybertutor.com.tw/nss/p/index

Share on: