CVE Database
/

CVE-2025-40625

Back to search

CVE-2025-40625

Published: May 6, 2025

Modified: May 7, 2025

PUBLISHED

Description

Unrestricted file upload in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to upload any file within the server, even a malicious file to obtain a Remote Code Execution (RCE).

VendorProductVersions

TCMAN

GIM

affected
v11

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now