CVE-2025-32957：baserCMS < 5.2.3 远程代码执行(RCE)

BaseCMS中的CVE-2025-32957允许通过恢复功能执行任意代码。该应用程序允许用户上传.zip文件，这些文件将被自动提取。攻击者可以在ZIP归档文件中包含恶意PHP文件，并且该文件将使用require_once在没有适当的文件名验证的情况下包含到系统中。这使得攻击者能够在服务器上执行任意PHP代码，从而可能损害应用程序及其相关数据的完整性。CVSS严重程度为8.7，表示高风险。

Organizations using basercms versions 5.2.2 and earlier, particularly those with publicly accessible restore functionality, are at significant risk. Shared hosting environments where multiple users can upload files are especially vulnerable, as a compromised user account could be used to exploit this vulnerability and impact other users on the same server.

• php: Examine web server access logs for suspicious ZIP file uploads, particularly those containing PHP files. Use grep to search for patterns indicative of malicious code within the uploaded ZIP archives.

grep -r '<?php' /var/www/basercms/uploads/*

• generic web: Monitor response headers for unexpected content or errors after ZIP file uploads. Use curl to test the restore functionality with a benign ZIP file and observe the server's behavior.

curl -I http://your-basercms-site.com/restore.php?file=test.zip

1. 2026-03-31Disclosure

   disclosure

2. 2026-03-31PoC

   poc

1. 已保留2025-04-14
2. 发布日期2026-03-31
3. EPSS 更新日期2026-04-07

CVE-2025-32957的主要缓解措施是将BaseCMS更新到5.2.3或更高版本。此版本包含一项修复程序，可验证并限制恢复过程中包含的文件名，从而防止包含恶意PHP文件。此外，实施额外的安全措施，例如限制恢复目录的写入权限并进行定期安全审计，可以帮助检测和防止潜在攻击。如果该功能不经常使用，则可以暂时禁用恢复功能，从而降低风险。