An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via renaming a PHP file to a SVG format.
History

Thu, 11 Dec 2025 21:45:00 +0000

Type Values Removed Values Added
First Time appeared Easyimages2.0 Project
Easyimages2.0 Project easyimages2.0
Vendors & Products Easyimages2.0 Project
Easyimages2.0 Project easyimages2.0

Thu, 11 Dec 2025 16:45:00 +0000

Type Values Removed Values Added
Description An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via renaming a PHP file to a SVG format.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2025-12-11T00:00:00.000Z

Updated: 2025-12-11T16:31:54.038Z

Reserved: 2025-11-18T00:00:00.000Z

Link: CVE-2025-65474

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-12-11T17:15:58.127

Modified: 2025-12-11T17:15:58.127

Link: CVE-2025-65474

cve-icon Redhat

No data.