CVE-2019-25582

🗓️ 21 Mar 2026 15:30:40Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 7 Views🌐 WEB

Authenticated attackers can download arbitrary files from doit cmdb via file_manager in index.php.

Reporter	Title	Published	Views	Family All 7
ATTACKERKB	CVE-2019-25582	21 Mar 202615:30	–	attackerkb
Circl	CVE-2019-25582	21 Mar 202615:16	–	circl
CNNVD	i-doit CMDB 代码问题漏洞	21 Mar 202600:00	–	cnnvd
Cvelist	CVE-2019-25582 i-doit CMDB 1.12 Arbitrary File Download via file_manager Parameter	21 Mar 202615:30	–	cvelist
EUVD	EUVD-2019-19906	21 Mar 202618:31	–	euvd
NVD	CVE-2019-25582	21 Mar 202616:16	–	nvd
Positive Technologies	PT-2026-26930	21 Mar 202600:00	–	ptsecurity

NVD

Vulners

Node

i-doit i-doitMatch1.12

[
  {
    "vendor": "I-Doit",
    "product": "doit CMDB",
    "versions": [
      {
        "version": "1.12",
        "status": "affected"
      }
    ]
  }
]

Source	Link
exploit-db	www.exploit-db.com/exploits/46133
netcologne	www.netcologne.dl.sourceforge.net/project/i-doit/i-doit/1.12/idoit-open-1.12.zip
i-doit	www.i-doit.org/
vulncheck	www.vulncheck.com/advisories/i-doit-cmdb-arbitrary-file-download-via-file-manager-parameter

Parameter	Position	Path	Description	CWE
file_manager	query param	index.php	Authenticated arbitrary file download via file parameter manipulation in index.php	CWE-434
file	query param	index.php	Authenticated arbitrary file download via file parameter manipulation in index.php	CWE-434

24 Mar 2026 20:36Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.16.5

CVSS 47.1

EPSS0.0008

CWE-434