CVE-2025-3842

A vulnerability was found in panhainan DS-Java 1.0 and classified as critical. This issue affects the function uploadUserPic.action of the file src/com/phn/action/FileUpload.java. The manipulation of the argument fileUpload leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

• CWE-74
• CWE-94
• CWE-94

• https://github.com/caigo8/CVE-md/blob/main/DS-Java/%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0RCE.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.305771Permissions Required, VDB Entry
• https://vuldb.com/?id.305771Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.556135Third Party Advisory, VDB Entry

Published

Apr 21, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-38414In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38415In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-38416In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-38417In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38418In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38419In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38420In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38421In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-38422In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-38423In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-38424In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38425In the Linux kernel, the following vulnerability has been re…7.8