CVE-2018-25421 in Open STA Managerالمعلومات

الملخص

بحسب MITRE • 30/05/2026

Open STA Manager 2.3 contains a path traversal vulnerability that allows authenticated users to download arbitrary files by manipulating the file parameter. Attackers can send GET requests to modules/backup/actions.php with op=getfile and traverse directories using ../ sequences to access sensitive system files.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

مسؤول

VulnCheck

حجز

30/05/2026

إفشاء

30/05/2026

الاعتدال

تمت الموافقة

إدخال

VDB-367449

استغلال

تحميل

EPSS

0.00040

KEV

لا

النشاطات

منخفض جدًا

المصادر

Interested in the pricing of exploits?

See the underground prices here!