CVE-2025-6866

creationtimestamp| type| source ---|---|--- 2025-06-29 19:22:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19871 2025-06-29 20:50:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsrkbycur62a...

CVE-2025-6866

CVE-2025-6866 affects code-projects Simple Forum 1.0, specifically the file /forum_downloadfile.php. Multiple connected sources describe a path traversal vulnerability where the attacker can manipulate the filename parameter to read arbitrary files. The vulnerability is exploitable remotely, and ...

CVE-2025-6866 code-projects Simple Forum forum_downloadfile.php path traversal

A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. This vulnerability affects unknown code of the file /forumdownloadfile.php. The manipulation of the argument filename leads to path traversal. The attack can be initiated remotely. The exploit has been...