GCVE - cpe:2.3:a:cmseasy:cmseasy:7.7.7.9:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:cmseasy:cmseasy:7.7.7.9:*:*:*:*:*:*:*

part: a version: 7.7.7.9 update: *

Vendor	Cmseasy (`7a0dbd4f-46ef-5e30-b4cc-084c5112e8a8`)
Product	Cmseasy (`ce14c714-d3fc-59fb-b3f2-8042e7893d89`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/cidengcc/cmseasy`	purl2cpe	2026-06-01 10:17:28.429021
`pkg:github/l3m0n/cmseasy`	purl2cpe	2026-06-01 10:17:28.429022
`pkg:github/source-hunter/cmseasy`	purl2cpe	2026-06-01 10:17:28.429024

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-1336`	vulnerable	2026-06-08 07:08:36.557565	CmsEasy image_admin.php deleteimg_action path traversal MEDIUM (4.3) A vulnerability has been found in CmsEasy 7.7.7.9 and classified as problematic. Affected by this vulnerability is the function deleteimg_action in the library lib/admin/image_admin.php. The manipulation of the argument imgname leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-02-16T09:00:14.232Z Updated: 2025-02-18T16:12:03.784Z Open on db.gcve.eu Reference links https://vuldb.com/?id.295951 https://vuldb.com/?ctiid.295951 https://vuldb.com/?submit.493685 https://github.com/Sinon2003/cve/blob/main/CmsEasy/CmsEasy-v7.7.7.9-PathTraversal-2-2-2.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-1335`	vulnerable	2026-06-08 07:08:36.556944	CmsEasy file_admin.php deleteimg_action path traversal MEDIUM (4.3) A vulnerability, which was classified as problematic, was found in CmsEasy 7.7.7.9. Affected is the function deleteimg_action in the library lib/admin/file_admin.php. The manipulation of the argument imgname leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-02-16T04:00:15.125Z Updated: 2025-02-18T21:32:38.225Z Open on db.gcve.eu Reference links https://vuldb.com/?id.295950 https://vuldb.com/?ctiid.295950 https://vuldb.com/?submit.493682 https://github.com/Sinon2003/cve/blob/main/CmsEasy/CmsEasy-v7.7.7.9-PathTraversal-2-2-1.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-1106`	vulnerable	2026-06-08 07:06:36.929499	CmsEasy database_admin.php restore_action path traversal MEDIUM (5.4) A vulnerability classified as critical has been found in CmsEasy 7.7.7.9. This affects the function deletedir_action/restore_action in the library lib/admin/database_admin.php. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-02-07T18:31:04.414Z Updated: 2025-02-12T20:51:41.660Z Open on db.gcve.eu Reference links https://vuldb.com/?id.294939 https://vuldb.com/?ctiid.294939 https://vuldb.com/?submit.491518 https://github.com/Sinon2003/cve/blob/main/CmsEasy/CmsEasyPathTraversal-2.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-0973`	vulnerable	2026-06-08 07:02:26.078994	CmsEasy index.php backAll_action path traversal MEDIUM (5.4) A vulnerability classified as critical was found in CmsEasy 7.7.7.9. This vulnerability affects the function backAll_action in the library lib/admin/database_admin.php of the file /index.php?case=database&act=backAll&admin_dir=admin&site=default. The manipulation of the argument select[] leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-02-03T00:31:04.880Z Updated: 2025-02-12T20:41:37.613Z Open on db.gcve.eu Reference links https://vuldb.com/?id.294364 https://vuldb.com/?ctiid.294364 https://vuldb.com/?submit.487649 https://github.com/Sinon2003/cve/blob/main/CmsEasy/CmsEasy-V7.7.7.9%2020240105-Directory%20Traversal.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-34315`	vulnerable	2026-06-08 06:37:33.119317	Details available CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the file_get_contents function in the fckedit_action method of /admin/template_admin.php. This vulnerability allows attackers to read arbitrary files. Published: 2024-05-07T00:00:00.000Z Updated: 2024-08-02T02:51:10.999Z Open on db.gcve.eu Reference links https://github.com/H3rmesk1t/vulnerability-paper/blob/main/CmsEasy-7.7.7.9-File%20Inclusion2.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-34314`	vulnerable	2026-06-08 06:37:33.117632	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-32163`	vulnerable	2026-06-08 06:35:32.981295	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-32162`	vulnerable	2026-06-08 06:35:32.979613	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-31551`	vulnerable	2026-06-08 06:35:31.968528	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-25828`	vulnerable	2026-06-08 06:31:23.883618	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

CmsEasy 7.7.7.9

Notes

PURL mappings

Vulnerability references

Contribute