6 matches found
Blackash-CVE-2025-31131
Blackash-CVE-2025-31131 CVE-2025-31131 - YesWiki 4.5.2 Path Traversal Exploit Description YesWiki is a wiki system written in PHP. The squelette parameter is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server. This vulnerability is fixed in 4.5.2. NIST: NV...
CVE-2025-31131
CVE-2025-31131 - Explotación de Path Traversal en YesWiki 4.5.2 Este es un exploit de path traversal no autenticado dirigido a versiones de YesWiki anteriores a la 4.5.2. La vulnerabilidad existe en el parámetro squelette, que permite leer archivos arbitrarios del servidor. Detalles de la...
📄 YesWiki Directory Traversal
YesWiki versions prior to 4.5.2 are vulnerable to an unauthenticated path traversal vulnerability through the squelette parameter. A remote attacker can leverage this flaw to read arbitrary files on the target system...
EUVD-2025-9333
Malicious code in bioql PyPI...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal through the squelette parameter. An attacker can read arbitrary files on the server by submitting specially crafted path traversal sequences. PoC...
YesWiki 路径遍历漏洞
YesWiki is a wiki system written in PHP by the French organization YesWiki. It is used to create and manage websites in a collaborative manner. A path traversal vulnerability exists in YesWiki versions prior to 4.5.2, which stems from the squelette parameter being vulnerable to a path traversal...