CVE-2025-15067

Unrestricted Upload of File with Dangerous Type vulnerability in Innorix Innorix WP allows Upload a Web Shell to a Web Server.This issue affects Innorix WP from All versions If the "exam" directory exists under the directory where the product is installed ex: innorix/exam...

CVE-2025-15066

CVE-2025-15066 affects Innorix WP with a path traversal flaw due to improper pathname restriction in the installation directory (exam directory). All versions are implicated if innorix/exam exists; can lead to arbitrary file download. Exploitation details are not provided beyond the description; ...