cveboard RSS feed

CVE-2025-7575

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2025
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Zavy86 WikiDocs submit.php image_delete_ajax path traversal

A vulnerability has been found in Zavy86 WikiDocs up to 1.0.77 and classified as critical. Affected by this vulnerability is the function image_drop_upload_ajax/image_delete_ajax of the file submit.php. The manipulation leads to path traversal. The attack can be launched remotely. Upgrading to version 1.0.78 is able to address this issue. The identifier of the patch is 98ea9ee4a2052c4327f89d2f7688cc1b5749450d. It is recommended to upgrade the affected component.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

WikiDocs

Vendor
Zavy86
Product
WikiDocs
Platforms
Unknown
Default status
Unknown
WikiDocs · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
1.0.67affectedUnavailableUnavailableUnavailableNone listed
1.0.68affectedUnavailableUnavailableUnavailableNone listed
1.0.69affectedUnavailableUnavailableUnavailableNone listed
1.0.70affectedUnavailableUnavailableUnavailableNone listed
1.0.71affectedUnavailableUnavailableUnavailableNone listed
1.0.72affectedUnavailableUnavailableUnavailableNone listed
1.0.73affectedUnavailableUnavailableUnavailableNone listed
1.0.74affectedUnavailableUnavailableUnavailableNone listed
1.0.75affectedUnavailableUnavailableUnavailableNone listed
1.0.76affectedUnavailableUnavailableUnavailableNone listed
1.0.77affectedUnavailableUnavailableUnavailableNone listed
1.0.78unaffectedUnavailableUnavailableUnavailableNone listed