CVE-2025-32302

Name of the Vulnerable Software and Affected Versions gavias Winnex versions 1.3.2 and earlier

Description The issue is related to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion.

Recommendations For gavias Winnex versions 1.3.2 and earlier, update to a version that fixes this issue, as no specific workaround is provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.