CVE-2025-12867— Hundred Plus｜EIP Plus - Arbitrary File Uplaod
Quick assessment
Affected
Hundred Plus EIP Plus
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Hundred Plus EIP Plus是中国台湾百加资通（Hundred Plus）公司的一个企业管理软件。 Hundred Plus EIP Plus存在代码问题漏洞，该漏洞源于允许特权远程攻击者上传和执行Web后门，可能导致服务器上执行任意代码。
Possible ATT&CK Techniques 3 AI
T1190 · Exploit Public-Facing Application T1059 · Command and Scripting Interpreter T1505.003 · Web Shell
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-12867
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Hundred Plus｜EIP Plus - Arbitrary File Uplaod
Source: CVE Program / CVE List V5
Vulnerability Description
EIP Plus developed by Hundred Plus has an Arbitrary File Uplaod vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
危险类型文件的不加限制上传
Source: CVE Program / CVE List V5
Vulnerability Title
Hundred Plus EIP Plus 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Hundred Plus EIP Plus是中国台湾百加资通（Hundred Plus）公司的一个企业管理软件。 Hundred Plus EIP Plus存在代码问题漏洞，该漏洞源于允许特权远程攻击者上传和执行Web后门，可能导致服务器上执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Hundred Plus | EIP Plus | 0 ~ RELEASE_240626 | - |
|
II. Public POCs for CVE-2025-12867
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-12867
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same weakness: CWE-434
-
CVE-2026-79670
Ech0 before 4.4.3 Stored XSS via SVG Upload -
CVE-2026-16601
CM Map Locations <= 2.1.8 - Authenticated (Subscriber+) Arbi -
CVE-2026-56702
Adminer before 5.4.3 Unrestricted File Upload via AdminerFil -
CVE-2026-32559
WordPress UltimateAI plugin <= 3.1.0 - Arbitrary File Upload -
CVE-2026-78337
Unrestricted upload of file with dangerous type in Prospero
V. Comments for CVE-2025-12867
No comments yet