Unrated severityNVD Advisory· Published Nov 18, 2025· Updated Dec 1, 2025
CVE-2025-63994
CVE-2025-63994
Description
An arbitrary file upload vulnerability in the /php/UploadHandler.php component of RichFilemanager v2.7.6 allows attackers to execute arbitrary code via uploading a crafted file.
Affected products
1- RichFilemanager/RichFilemanagerdescription
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.