CVE-2018-25439 - MetInfo CMS < 6.1.1 Unauthenticated Path Traversal via thumb.php dir Parameter
CVE ID :CVE-2018-25439 Published : Oct. 22, 2026, 11:17 a.m. | 50 minutes ago Description :MetInfo CMS 6.0.0 before 6.1.1 contains a path traversal vulnerability in /include/thumb.php that allows unauthenticated attackers to read arbitrary files via the dir parameter. Attackers can send...