Report: CVE-2019-25579 - phpTransformer 2016.9 Directory Traversal via jQueryFileUpload

Report: CVE-2019-25579 - phpTransformer 2016.9 Directory Traversal via jQueryFileUpload

CVE ID :CVE-2019-25579 Published : March 21, 2026, 4:16 p.m. | 23 minutes ago Description :phpTransformer 2016.9 contains a directory traversal vulnerability that allows unauthenticated attackers to access arbitrary files by manipulating the path parameter. Attackers can send requests to the jQueryFileUploadmaster server endpoint with traversal sequences ../../../../../../ to list and retrieve files outside the intended directory. Severity: 8.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
HIGH
Published
March 21, 2026