Skip to content
OpenAdvisories

Vendor

Melis Technology

3 known vulnerabilities.

Products

Melis Platform 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-10353 Public exploit

    Missing Authorization vulnerability in Melis Platform

    File upload leading to remote code execution (RCE) in the “melis-cms-slider” module of Melis Technology's Melis Platform. This vulnerability allows an attacker to upload a malicious file via a POST request to '/melis/MelisCmsSlider/MelisCmsSliderDetails/saveD…

    Melis Technology Melis Platform melisplatform/melis-cms-slider Packagist
  • Critical 9.3
    CVE-2025-10352 Public exploit

    Missing Authorization vulnerability in Melis Platform

    Vulnerability in the melis-core module of Melis Technology's Melis Platform, which, if exploited, allows an unauthenticated attacker to create an administrator account via a request to '/melis/MelisCore/ToolUser/addNewUser'.

    Melis Technology Melis Platform melisplatform/melis-core Packagist
  • Critical 9.3
    CVE-2025-10351 Public exploit

    SQL injection vulnerability in Melis Platform

    SQL injection vulnerability based on the melis-cms module of the Melis platform from Melis Technology. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'idPage' parameter in the '/melis/MelisCms/PageEdition/g…

    Melis Technology Melis Platform melisplatform/melis-cms Packagist