EUVD-2025-22857

Malicious code in bioql PyPI...

CVE-2025-10232: Improper Limitation of a Pathname to a Restricted Directory

A weakness has been identified in 299ko up to 2.0.0. Affected by this issue is the function getSentDir/delete of the file plugin/filemanager/controllers/FileManagerAPIController.php. Executing manipulation can lead to path traversal. It is possible to launch the attack remotely. The exploit has...

299Ko 路径遍历漏洞

299Ko is a simple, fast and lightweight content management system from 299Ko open source. 299Ko 2.0.0 and previous versions of path traversal vulnerability , the vulnerability stems from the file plugin/filemanager/controllers/FileManagerAPIController.php function getSentDir/delete the wrong...

CVE-2025-8265

A vulnerability classified as critical has been found in 299Ko CMS 2.0.0. This affects an unknown part of the file /admin/filemanager/view of the component File Management. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclose...

CVE-2025-8265

A vulnerability classified as critical has been found in 299Ko CMS 2.0.0. This affects an unknown part of the file /admin/filemanager/view of the component File Management. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclose...

CVE-2025-8265 299Ko CMS File Management view unrestricted upload

A vulnerability classified as critical has been found in 299Ko CMS 2.0.0. This affects an unknown part of the file /admin/filemanager/view of the component File Management. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclose...

CVE-2025-8265

CVE-2025-8265 affects 299Ko CMS 2.0.0 in the File Management component, specifically the /admin/filemanager/view path. The issue enables unrestricted file upload due to a root-cause in that view, allowing remote initiation. Multiple sources confirm a publicly disclosed exploit and that the vendor...

299Ko 代码问题漏洞

299Ko is a simple, fast and lightweight content management system from 299Ko open source. A code issue vulnerability exists in version 2.0.0 of 299Ko, which stems from the existence of unlimited uploads in the file management component in file/admin/filemanager/view...

PT-2025-31055 · 299Ko Cms · 299Ko Cms

Name of the Vulnerable Software and Affected Versions: 299Ko CMS version 2.0.0 Description: A critical vulnerability exists in the File Management component of 299Ko CMS 2.0.0. The issue involves unrestricted file upload through manipulation of the /admin/filemanager/view file. The attack can be...

CVE-2025-8265: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical has been found in 299Ko CMS 2.0.0. This affects an unknown part of the file /admin/filemanager/view of the component File Management. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclose...