CVE-2025-15091 | UTT 进取 512W up to 1.7.7-171114 /goform/formPictureUrl strcpy importpictureurl buffer overflow

A vulnerability marked as critical has been reported in UTT 进取 512W up to 1.7.7-171114. This issue affects the function strcpy of the file /goform/formPictureUrl. This manipulation of the argument importpictureurl causes buffer overflow.

The identification of this vulnerability is CVE-2025-15091. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.