Vulnerabilities
Report: CVE-2018-25421 - Open STA Manager 2.3 Arbitrary File Download via Path Traversal (2026)
CVE ID :CVE-2018-25421 Published : May 30, 2026, 2:55 p.m. | 50 minutes ago Description :Open STA Manager 2.3 contains a path traversal vulnerability that allows authenticated users to download arbitrary files by manipulating the file parameter. Attackers can send GET requests to modules/backup/actions.php with op=getfile and traverse directories using ../ sequences to access sensitive system files. Severity: 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE Details
Affected Product:
php
Impact:
path traversal