CVE-2025-34045 | Shenzhen Yuanmengyun WeiPHP 5.0 POST _download_imgage picUrl path traversal (CNVD-2020-68596)

June 26, 2025 Yanac

A vulnerability has been found in Shenzhen Yuanmengyun WeiPHP 5.0 and classified as critical. This vulnerability affects unknown code of the file /public/index.php/material/Material/_download_imgage of the component POST Handler. The manipulation of the argument picUrl leads to path traversal.

This vulnerability was named CVE-2025-34045. The attack can be initiated remotely. There is no exploit available.VulDB Recent EntriesRead More