{"id":"CVE-2025-50881","title":"The `flow/admin/moniteur.php` script in Use It Flow administration website before 10.0.0 is vulnerable to Remote Code Execution","summary":"The `flow/admin/moniteur.php` script in Use It Flow administration website before 10.0.0 is vulnerable to Remote Code Execution. When handling GET requests, the script takes user-supplied input from the `action` URL parameter, performs i…","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-94"],"published":"2026-03-16","updated":"2026-07-05","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-50881","references":[{"url":"https://github.com/0xdeadbit/CVE-2025-50881","label":"cve@mitre.org"}],"tags":["nvd","exploit-available"],"epss":0.0061,"epssPercentile":0.4699,"ingestedAt":"2026-07-06T16:44:34.528Z","exploits":{"github":1,"githubRepos":["https://github.com/0xdeadbit/CVE-2025-50881"],"checkedAt":"2026-09-26T09:05:35.908Z"},"exploitAvailable":true,"slug":"CVE-2025-50881","body":"## Overview\n\nThe `flow/admin/moniteur.php` script in Use It Flow administration website before 10.0.0 is vulnerable to Remote Code Execution. When handling GET requests, the script takes user-supplied input from the `action` URL parameter, performs insufficient validation, and incorporates this input into a string that is subsequently executed by the `eval()` function. Although a `method_exists()` check is performed, it only validates the part of the user input *before* the first parenthesis `(`, allowing an attacker to append arbitrary PHP code after a valid method call structure. Successful exploitation allows an unauthenticated or trivially authenticated attacker to execute arbitrary PHP code on the server with the privileges of the web server process.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":61,"depthScoreParts":{"impact":48.4,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":4889,"id":"CVE-2025-50881","ts":1788887215020,"field":"exploit_available","old":"false","new":"true"},{"seq":3772,"id":"CVE-2025-50881","ts":1788886334573,"field":"exploit_available","old":"true","new":"false"},{"seq":2617,"id":"CVE-2025-50881","ts":1788883012839,"field":"exploit_available","old":"false","new":"true"},{"seq":1646,"id":"CVE-2025-50881","ts":1788882417189,"field":"exploit_available","old":"true","new":"false"},{"seq":754,"id":"CVE-2025-50881","ts":1788881850493,"field":"exploit_available","old":"false","new":"true"}]}