9.1
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Description
An arbitrary file rename vulnerability in the /admin/filer.php component of EasyImages 2.0 v2.8.6 and below allows attackers with Administrator privileges to execute arbitrary code via injecting a crafted payload into an uploaded file name.
AI Analysis
Arbitrary file rename vulnerability allowing arbitrary code execution
Basic Information
ID
CVE-2025-65473
Source
mitre
Published
Dec 11, 2025 at 00:00
Modified
Dec 11, 2025 at 16:41
Affected Product
Vendor
EasyImages Team
Product
EasyImages
Version
2.0 v2.8.6 and below
Affected Versions
n/a n/a n/a
CWE Classification
AI Assessment
AI Score
9.1 / 10
AI Severity
Critical
Vendor
EasyImages Team
Product
EasyImages
Version
2.0 v2.8.6 and below