The vulnerability CVE-2025-64195 in ThimPress Eduma arises from improper control of filenames in PHP include or require statements, resulting in a PHP Local File Inclusion flaw. This can be exploited remotely over the network by an attacker with low privileges and no user interaction, potentially leading to full compromise of the affected system. The CVSS score is 7.5, indicating high severity with high impact on confidentiality, integrity, and availability. The affected versions include all Eduma versions up to 5.7.6. No patch or official remediation details are currently available.

Successful exploitation of this vulnerability could allow an attacker to include local files on the server, potentially leading to disclosure of sensitive information, code execution, or denial of service. The CVSS vector indicates high impact on confidentiality, integrity, and availability. However, there are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to vulnerable endpoints and applying strict input validation if possible. Monitor official ThimPress communications for updates and patches.