CVE-2025-5499

creationtimestamp| type| source ---|---|--- 2025-06-03 14:53:00+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqpk5waorip2...

CVE-2025-5499

A vulnerability classified as critical has been found in slackero phpwcms up to 1.9.45/1.10.8. Affected is the function isfile/getimagesize of the file imageresized.php. The manipulation of the argument imgfile leads to deserialization. It is possible to launch the attack remotely. The exploit ha...

CVE-2025-5499 slackero phpwcms image_resized.php getimagesize deserialization

A vulnerability classified as critical has been found in slackero phpwcms up to 1.9.45/1.10.8. Affected is the function isfile/getimagesize of the file imageresized.php. The manipulation of the argument imgfile leads to deserialization. It is possible to launch the attack remotely. The exploit ha...

CVE-2025-5499

Slackero phpwcms versions up to 1.9.45 and 1.10.8 are affected. The vulnerability is in image_resized.php, specifically the is_file/getimagesize usage, where manipulation of the imgfile argument leads to deserialization. This can be exploited remotely and has been publicly disclosed. Remediation:...