CVE-2019-25574

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2019-25574
Green CMS 2.x contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files and directories by injecting directory traversal sequences. Attackers can manipulate the theme_name parameter in the themeexporthandle action or supply base64-encoded file paths to the downfile action to retrieve sensitive files outside intended directories.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
http://www.greencms.net/ Broken Link
https://codeload.github.com/GreenCMS/GreenCMS/zip/beta Product
https://www.exploit-db.com/exploits/46245 Exploit Third Party Advisory VDB Entry
https://www.vulncheck.com/advisories/green-cms-2-x-path-traversal-arbitrary-file-download Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:njtech:greencms:*:*:*:*:*:*:*:*
History

24 Mar 2026, 16:37

Type Values Removed Values Added
References () http://www.greencms.net/ - () http://www.greencms.net/ - Broken Link
References () https://codeload.github.com/GreenCMS/GreenCMS/zip/beta - () https://codeload.github.com/GreenCMS/GreenCMS/zip/beta - Product
References () https://www.exploit-db.com/exploits/46245 - () https://www.exploit-db.com/exploits/46245 - Exploit, Third Party Advisory, VDB Entry
References () https://www.vulncheck.com/advisories/green-cms-2-x-path-traversal-arbitrary-file-download - () https://www.vulncheck.com/advisories/green-cms-2-x-path-traversal-arbitrary-file-download - Third Party Advisory
CPE cpe:2.3:a:njtech:greencms:*:*:*:*:*:*:*:*
Summary
  • (es) Green CMS 2.x contiene una vulnerabilidad de salto de ruta que permite a atacantes autenticados descargar archivos y directorios arbitrarios inyectando secuencias de salto de directorio. Los atacantes pueden manipular el parámetro theme_name en la acción themeexporthandle o proporcionar rutas de archivo codificadas en base64 a la acción downfile para recuperar archivos sensibles fuera de los directorios previstos.
First Time Njtech
Njtech greencms

21 Mar 2026, 16:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-03-21 16:16

Updated : 2026-03-24 16:37

NVD link : CVE-2019-25574

Mitre link : CVE-2019-25574

CVE.ORG link : CVE-2019-25574

JSON object : View

Products Affected

njtech

  • greencms
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')