Easyimages2.0 Project

Easyimages2.0

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2025-65472

Exploit
  • EPSS 0.03%
  • Veröffentlicht 11.12.2025 00:00:00
  • Zuletzt bearbeitet 15.12.2025 19:29:07

A Cross-Site Request Forgery (CSRF) in the /admin/admin.inc.php component of EasyImages 2.0 v2.8.6 and below allows attackers to escalate privileges to Administrator via user interaction with a malicious web page.

9.1

CVE-2025-65473

Exploit
  • EPSS 0.12%
  • Veröffentlicht 11.12.2025 00:00:00
  • Zuletzt bearbeitet 15.12.2025 19:28:47

An arbitrary file rename vulnerability in the /admin/filer.php component of EasyImages 2.0 v2.8.6 and below allows attackers with Administrator privileges to execute arbitrary code via injecting a crafted payload into an uploaded file name.

8.8

CVE-2025-65471

Exploit
  • EPSS 0.1%
  • Veröffentlicht 11.12.2025 00:00:00
  • Zuletzt bearbeitet 18.12.2025 21:15:56

An arbitrary file upload vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via uploading a crafted PHP file.

9.8

CVE-2025-65474

Exploit
  • EPSS 0.1%
  • Veröffentlicht 11.12.2025 00:00:00
  • Zuletzt bearbeitet 19.12.2025 19:46:51

An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via renaming a PHP file to a SVG format.

5.4

CVE-2025-13415

Exploit
  • EPSS 0.04%
  • Veröffentlicht 19.11.2025 22:16:03
  • Zuletzt bearbeitet 25.11.2025 19:31:45

A vulnerability was identified in icret EasyImages up to 2.8.6. This affects an unknown part of the file /app/upload.php of the component SVG Image Handler. The manipulation of the argument File leads to cross site scripting. It is possible to initia...

5.3

CVE-2023-7098

  • EPSS 0.14%
  • Veröffentlicht 25.12.2023 02:15:44
  • Zuletzt bearbeitet 21.11.2024 08:45:15

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic was found in icret EasyImages 2.8.3. This vulnerability affects unknown code of the file app/hide.php. The manipulation of the argument key leads to path traversal: '../filedir...

6.1

CVE-2023-33599

Exploit
  • EPSS 0.51%
  • Veröffentlicht 23.05.2023 15:15:09
  • Zuletzt bearbeitet 31.01.2025 18:15:33

EasyImages2.0 ≤ 2.8.1 is vulnerable to Cross Site Scripting (XSS) via viewlog.php.

5.4

CVE-2023-1181

Exploit
  • EPSS 0.07%
  • Veröffentlicht 05.03.2023 17:15:09
  • Zuletzt bearbeitet 21.11.2024 07:38:37

Cross-site Scripting (XSS) - Stored in GitHub repository icret/easyimages2.0 prior to 2.6.7.