Security Advisory

CVE-2025-65473

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-12-11 00:00:00
Last updated 2025-12-11 16:41:57
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

An arbitrary file rename vulnerability in the /admin/filer.php component of EasyImages 2.0 v2.8.6 and below allows attackers with Administrator privileges to execute arbitrary code via injecting a crafted payload into an uploaded file name.