Vulnerability Description
A improper control of filename for include/require statement in PHP program vulnerability in the retrieve course Information function of Wisdom Master Pro versions 5.0 through 5.2 allows remote attackers to perform arbitrary system commands by running a malicious file.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2025-31340?
CVE-2025-31340 is a documented vulnerability. A improper control of filename for include/require statement in PHP program vulnerability in the retrieve course Information function of Wisdom Master Pro versions 5.0 through 5.2 allows remote attack...
How severe is CVE-2025-31340?
CVSS scoring is not yet available for CVE-2025-31340. Check NVD for updates.
Is there a patch for CVE-2025-31340?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.