Report: CVE-2019-25574 - Green CMS 2.x Path Traversal Arbitrary File Download

Report: CVE-2019-25574 - Green CMS 2.x Path Traversal Arbitrary File Download

CVE ID :CVE-2019-25574 Published : March 21, 2026, 4:16 p.m. | 23 minutes ago Description :Green CMS 2.x contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files and directories by injecting directory traversal sequences. Attackers can manipulate the theme_name parameter in the themeexporthandle action or supply base64-encoded file paths to the downfile action to retrieve sensitive files outside intended directories. Severity: 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
HIGH
Published
March 21, 2026
Impact: path traversal