CVE-2025-52023

A vulnerability in the PHP backend of gemscms.aptsys.com.sg thru 2025-05-28 allows unauthenticated remote attackers to trigger detailed error messages that disclose internal file paths, code snippets, and stack traces. This occurs when specially crafted HTTP GET/POST requests are sent to public API endpoints, exposing potentially sensitive information useful for further exploitation. This issue is classified under CWE-209: Information Exposure Through an Error Message.

• CWE-209

• https://gist.github.com/ReverseThatApp/4a6be2b9b2ba39d38c35c8753e0afd39Third Party Advisory

Published

Jan 23, 2026

Last Modified

Jul 5, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-51991XWiki through version 17.3.0 is vulnerable to Server-Side Te…8.8
• CVE-2025-5200A vulnerability was found in Open Asset Import Library Assim…7.8
• CVE-2025-5201A vulnerability was found in Open Asset Import Library Assim…7.8
• CVE-2025-5202A vulnerability was found in Open Asset Import Library Assim…7.8
• CVE-2025-52021A SQL Injection vulnerability exists in the edit_product.php…9.8
• CVE-2025-52022A vulnerability in the PHP backend of gemsloyalty.aptsys.com…5.3
• CVE-2025-52024A vulnerability exists in the Aptsys POS Platform Web Servic…9.4
• CVE-2025-52025An SQL Injection vulnerability exists in the GetServiceByRes…9.4
• CVE-2025-52026An information disclosure vulnerability exists in the /srvs/…7.5
• CVE-2025-5203A vulnerability was found in Open Asset Import Library Assim…7.8
• CVE-2025-52035A vulnerability in NotesCMS and specifically in the page /in…6.1
• CVE-2025-52036A vulnerability has been found in NotesCMS and classified as…6.1