critical9.8
CVE-2025-65474
An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via re…
Impact
An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via renaming a PHP file to a SVG format.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Easyimages2.0 Project | Easyimages2.0 | through 2.8.6 |