CVE-2025-0973

A vulnerability classified as critical was found in CmsEasy 7.7.7.9. This vulnerability affects the function backAll_action in the library lib/admin/database_admin.php of the file /index.php?case=database&act=backAll&admin_dir=admin&site=default. The manipulation of the argument select[] leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-22

• https://github.com/Sinon2003/cve/blob/main/CmsEasy/CmsEasy-V7.7.7.9%2020240105-Directory%20Traversal.mdExploit
• https://vuldb.com/?ctiid.294364Permissions Required, VDB Entry
• https://vuldb.com/?id.294364Permissions Required, VDB Entry
• https://vuldb.com/?submit.487649Third Party Advisory, VDB Entry

Published

Feb 3, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-0967A vulnerability was found in code-projects Chat System 1.0 a…7.5
• CVE-2025-0968The ElementsKit Elementor addons plugin for WordPress is vul…5.3
• CVE-2025-0969The Brizy – Page Builder plugin for WordPress is vulnerable …6.5
• CVE-2025-0970A vulnerability was found in Zenvia Movidesk up to 25.01.22.…6.1
• CVE-2025-0971A vulnerability was found in Zenvia Movidesk up to 25.01.22.…5.4
• CVE-2025-0972A vulnerability classified as problematic has been found in …5.4
• CVE-2025-0974A vulnerability was determined in MaxD Lightning Module 4.43…5
• CVE-2025-0975IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD console could al…8.8
• CVE-2025-0976Information Exposure Vulnerability in Hitachi Ops Center API…7.5
• CVE-2025-0980Nokia SR Linux is vulnerable to an authentication vulnerabil…6.4
• CVE-2025-0981A vulnerability exists in ChurchCRM 5.13.0 and prior that al…6.1
• CVE-2025-0982Sandbox escape in the JavaScript Task feature of Google Clou…10