CVE-2025-32142
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Apr 4, 2025
Updated: Apr 7, 2025
CWE ID 98
Summary
CVE-2025-32142 is a filename manipulation vulnerability affecting the Stylemix Motors software, from an unknown version up to 1.4.65. This issue allows an attacker to include local files during the execution of PHP programs, potentially leading to unauthorized access or data theft. The vulnerability stems from improper control of the filename used in PHP's include or require statements. This weakness can be exploited remotely, posing a significant risk to systems running the affected Motors software.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.