Live › vulnerability › CVE-2018-25439
Go to dashboardMetInfo CMS versions 6.0.0 before 6.1.1 let anyone send a crafted dir parameter to /include/thumb.php and read arbitrary files. On Windows, backslash sequences bypass the str_replace filter, exposing files such as config_db.php that hold database credentials.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Check the installed MetInfo version and whether it is below 6.1.1; the sources do not give a command to test for the traversal.
6.1.1 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
MetInfo CMS 6.0.0 before 6.1.1 contains a path traversal vulnerability in /include/thumb.php that allows unauthenticated attackers to read arbitrary files via the dir parameter. Attackers can send crafted requests with backslash sequences bypassing the str_replace filter to read files like config_db.php on Windows. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-14.
This page as .md · .json · in your agent: get_signal("CVE-2018-25439")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.