CVE-2025-65287

SNMP Web Pro 1.1 is affected by an unauthenticated directory traversal in cgi-bin/upload.cgi. The CGI concatenates user-supplied parameters onto /var/www/files/userScript/ using memcpy/strcat without validation or canonicalization, enabling ../ sequences to escape the intended directory. The down...