CVE-2025-15187 GreenCMS File DataController.class.php path traversal

A vulnerability was found in GreenCMS up to 2.3. This affects an unknown part of the file /DataController.class.php of the component File Handler. Performing a manipulation of the argument sqlFiles/zipFiles results in path traversal. The attack can be initiated remotely. The exploit has been made...

CVE-2025-15187

GreenCMS up to version 2.3 is affected by a path traversal in the File Handler’s DataController.class.php, where manipulating sqlFiles/zipFiles enables traversal. The issue is remote and publicly exploitable; affected products are no longer supported by the maintainer. No remediation or fixed ver...

GreenCMS 路径遍历漏洞

GreenCMS is GreenCMS open source a content management system CMS based on ThinkPHP development. A path traversal vulnerability exists in GreenCMS 2.3 and earlier versions, which stems from incorrect manipulation of the parameter sqlFiles/zipFiles in the file/DataController.class.php of the...