A vulnerability was detected in PHPEMS up to 11.0.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Jan 1, 2026 · NIST NVD

   Detected

   A vulnerability was detected in PHPEMS up to 11.0. The impacted element is an unknown function. The manipulation results in cross-site request forgery. The attack may be launched remotely.

2. Oct 14, 2026 · NIST NVD

   Updated

   A vulnerability was detected in PHPEMS up to 11.0. The impacted element is an unknown function. The manipulation results in cross-site request forgery. The attack may be launched remotely.

Affected

• cpe phpems/phpemsversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2025-15405

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2025-15405

  30-day exploitation probability 0.3%

  first.org
• NIST NVDVulnerability recordCVE-2025-15405

  A vulnerability was detected in PHPEMS up to 11.0. The impacted element is an unknown function. The manipulation results in cross-site request forgery. The attack may be launched remotely.

  nvd.nist.gov

References

• Exploit · byebydoggy.github.io
• Permissions Required · vuldb.com
• Third Party Advisory · vuldb.com
• Third Party Advisory · vuldb.com