CVE-2025-52207 PoC — MIKO MikoPBX 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-52207.yaml

Associated Vulnerability

Title:MIKO MikoPBX 安全漏洞 (CVE-2025-52207)
Description:MIKO MikoPBX是MIKO公司的一款开源的图形用户界面。 MIKO MikoPBX 2024.1.114及之前版本存在安全漏洞，该漏洞源于允许上传PHP脚本到任意目录。

Description

MikoPBX through 2024.1.114 contains an authenticated unrestricted file upload vulnerability caused by allowing PHP script uploads in PBXCoreREST/Controllers/Files/PostController.php.

File Snapshot


 id: CVE-2025-52207

info:
  name: MikoPBX - Unrestricted File Upload
  author: darses
  severity: cr

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.