An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via renaming a PHP file to a SVG format.
References
| Link | Resource |
|---|---|
| https://congsec.cn?id=20251103234511-9418dk9 | Exploit Third Party Advisory |
| https://gist.github.com/CongSec/3cf968621f71a7da35dcc9b8f0b29bb2 | Exploit Third Party Advisory |
Configurations
History
19 Dec 2025, 19:46
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://congsec.cn?id=20251103234511-9418dk9 - Exploit, Third Party Advisory | |
| References | () https://gist.github.com/CongSec/3cf968621f71a7da35dcc9b8f0b29bb2 - Exploit, Third Party Advisory | |
| First Time |
Easyimages2.0 Project
Easyimages2.0 Project easyimages2.0 |
|
| CPE | cpe:2.3:a:easyimages2.0_project:easyimages2.0:*:*:*:*:*:*:*:* | |
| CWE | CWE-706 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
18 Dec 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-434 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
11 Dec 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-11 17:15
Updated : 2025-12-19 19:46
NVD link : CVE-2025-65474
Mitre link : CVE-2025-65474
CVE.ORG link : CVE-2025-65474
JSON object : View
Products Affected
easyimages2.0_project
- easyimages2.0