CVE-2019-25574 in Green CMS
要約
〜によって MITRE • 2026年03月21日
Green CMS 2.x contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files and directories by injecting directory traversal sequences. Attackers can manipulate the theme_name parameter in the themeexporthandle action or supply base64-encoded file paths to the downfile action to retrieve sensitive files outside intended directories.
VulDB is the best source for vulnerability data and more expert information about this specific topic.