The vulnerability CVE-2025-68983 affects thembay Greenmart up to version 4.2.11 and is caused by improper validation or control of filenames used in PHP include or require statements. This leads to a Local File Inclusion vulnerability, which can allow an attacker with low privileges to include and execute arbitrary files on the server. The CVSS 3.1 base score is 7.5, reflecting network attack vector, high attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability could allow an attacker to read sensitive files, execute arbitrary code, or disrupt service on the affected Greenmart installations. The impact affects confidentiality, integrity, and availability of the system. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to vulnerable Greenmart versions and apply any recommended configuration changes to limit file inclusion risks. Monitor vendor channels for updates.