A vulnerability was found in HuangDou UTCMS 9. It has been declared as problematic. This vulnerability affects unknown code of the file app/modules/ut-frame/admin/login.php of the component Login. Such manipulation of the argument code leads to incorrect comparison.
This vulnerability is documented as CVE-2025-9401. The attack can be executed remotely. Additionally, an exploit exists.
The vendor was contacted early about this disclosure but did not respond in any way.
