CVE-2025-10709

A vulnerability was detected in Four-Faith Water Conservancy Informatization Platform 1.0. Affected by this issue is some unknown functionality of the file /history/historyDownload.do;otheruserLogin.do;getfile. The manipulation of the argument fileName results in path traversal. The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-22

• https://github.com/Cstarplus/CVE/issues/5Exploit, Issue Tracking, Third Party Advisory
• https://vuldb.com/?ctiid.324997Permissions Required, VDB Entry
• https://vuldb.com/?id.324997Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.644874Third Party Advisory, VDB Entry
• https://github.com/Cstarplus/CVE/issues/5Exploit, Issue Tracking, Third Party Advisory

Published

Sep 19, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-10702Improper Control of Generation of Code ('Code Injection') vu…8.6
• CVE-2025-10703Improper Control of Generation of Code ('Code Injection') vu…8.6
• CVE-2025-10705The MxChat – AI Chatbot for WordPress plugin for WordPress i…5.3
• CVE-2025-10706The Classified Pro theme for WordPress is vulnerable to unau…8.8
• CVE-2025-10707A weakness has been identified in JeecgBoot up to 3.8.2. Aff…8.8
• CVE-2025-10708A security vulnerability has been detected in Four-Faith Wat…7.5
• CVE-2025-1071A stored cross-site scripting (XSS) vulnerability exists in …4.8
• CVE-2025-10710A flaw has been found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up…4.3
• CVE-2025-10711A vulnerability has been found in 07FLYCMS, 07FLY-CMS and 07…4.3
• CVE-2025-10712A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCR…7.3
• CVE-2025-10713An XML External Entity (XXE) vulnerability exists in multipl…9.1
• CVE-2025-10714AXIS Optimizer was vulnerable to an unquoted search path vul…8.4