CVE-2025-70831: Improper Neutralization of Special Elements used in an OS Command

A Remote Code Execution RCE vulnerability was found in Smanga 3.2.7 in the /php/path/rescan.php interface. The application fails to properly sanitize user-supplied input in the mediaId parameter before using it in a system shell command. This allows an unauthenticated attacker to inject arbitrary...

CVE-2025-70831

A Remote Code Execution (RCE) vulnerability exists in Smanga version 3.2.7 , a Docker-based comic streaming tool. The flaw is located in the /php/path/rescan.php interface, where the application fails to properly sanitize user-supplied input in the mediaId parameter before executing a system shel...