Path Traversal Vulnerability in zyx0814 Pichome Affected by File Manipulation
CVE-2025-1743

6.9MEDIUM

Key Information:

Vendor

Zyx0814

Status
Pichome
Vendor
CVE Published:
27 February 2025

Badges

👾 Exploit Exists

What is CVE-2025-1743?

A path traversal vulnerability exists in the zyx0814 Pichome version 2.1.0, specifically affecting the /index.php?mod=textviewer file. An attacker can exploit this vulnerability by manipulating the 'src' argument, allowing them to access arbitrary files on the server. This vulnerability can be triggered remotely, potentially giving unauthorized users access to critical system files. Immediate action is recommended to mitigate risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Pichome 2.1.0

References

https://vuldb.com/?id.297831
vdb-entrytechnical-description
https://vuldb.com/?ctiid.297831
signaturepermissions-required
https://vuldb.com/?submit.502168
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

sheratan (VulDB User)
JSON
.