CVE-2025-61543

A Host Header Injection vulnerability exists in the password reset functionality of CraftMyCMS 4.0.2.2. The system uses `$_SERVER['HTTP_HOST']` directly to construct password reset links sent via email. An attacker can manipulate the Host header to send malicious reset links, enabling phishing attacks or account takeover.

• CWE-284

• https://github.com/bugdotexe/Vulnerability-Research/tree/main/CVE-2025-61543
• https://owasp.org/www-community/vulnerabilities/HTTP_Host_header_injection

Published

Oct 16, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-61532Cross Site Scripting vulnerability in SVX Portal v.2.7A to e…6.1
• CVE-2025-61536FelixRiddle dev-jobs-handlebars 1.0 uses absolute password-r…8.2
• CVE-2025-61539Cross site scripting (XSS) vulnerability in Ultimate PHP Boa…6.1
• CVE-2025-6154A vulnerability was found in PHPGurukul Hostel Management Sy…9.8
• CVE-2025-61540SQL injection vulnerability in Ultimate PHP Board 2.2.7 via …6.5
• CVE-2025-61541Webmin 2.510 is vulnerable to a Host Header Injection in the…7.1
• CVE-2025-61546There is an issue on the /PSP/appNET/Store/CartV12.aspx/GetU…9.1
• CVE-2025-61547Cross-Site Request Forgery (CSRF) is present on all function…6.8
• CVE-2025-61548SQL Injection is present on the hfInventoryDistFormID parame…9.8
• CVE-2025-61549Cross-Site Scripting (XSS) is present on the LoginID paramet…6.1
• CVE-2025-6155A vulnerability was found in PHPGurukul Hostel Management Sy…9.8
• CVE-2025-61550Cross-Site Scripting (XSS) is present on the ctl00_Content01…5.4