CVE-2025-46157
Critical · CVSS 9.9EfroTech Time Trax — Unrestricted File Upload (Remote Code Execution)
- CVSS
- 9.9
- nvd
- EPSS
- 0.78%
- 51th pct
- KEV
- No
- Class
- other
- CWE-434
Description
An issue in EfroTech Time Trax v.1.0 allows a remote attacker to execute arbitrary code via the file attachment function in the leave request form
Search profile — drives PoC discovery
Symbols file attachmentleave request formfile uploadarbitrary file uploadCWE-434
Keywords CVE-2025-46157EfroTech Time TraxTime Trax v1.0unrestricted file uploadleave request RCEarbitrary code execution file uploadEfroTech PoC
Versions: v1.0
Ranked PoCs (2) — best first
Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.
- ★ 1
- ★ 0PuddinCat/GithubRepoSpider needs reviewtrickest
Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.
References
Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-06T06:30:39.000Z