CVE-2025-32155

Summary

CVE-2025-32155 is a filename manipulation vulnerability affecting the markkinchin Beds24 Online Booking system. The issue stems from the PHP program's improper handling of include/require statements, making it susceptible to Remote File Inclusion (RFI) attacks. An attacker can exploit this vulnerability to load arbitrary PHP files on the targeted server, potentially resulting in information disclosure, code execution, or further system compromise. The affected versions of Beds24 Online Booking range from the unspecified "n/a" to 2.0.26. It is essential for users to apply necessary patches or updates to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.