CVE-2025-22364

Summary

CVE-2025-22364 is a filename manipulation vulnerability affecting the Service Shogun Ach Invoice App. The flaw, classified as a PHP Remote File Inclusion (RFI) vulnerability, enables an attacker to include local files on the server. Specifically, the issue arises from the improper control of filenames included in PHP's "require" or "include" statements. This vulnerability affects the Ach Invoice App from an unspecified version up until 1.0.1. Successful exploitation of this issue could potentially compromise the server by allowing the attacker to execute arbitrary code and gain unauthorized access.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.