CVE-2025-1743

A vulnerability, which was classified as critical, was found in zyx0814 Pichome 2.1.0. This affects an unknown part of the file /index.php?mod=textviewer. The manipulation of the argument src leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

• CWE-22

• https://github.com/sheratan4/cve/issues/4
• https://vuldb.com/?ctiid.297831
• https://vuldb.com/?id.297831
• https://vuldb.com/?submit.502168

Published

Feb 27, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-1737Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2025-1738A Password Transmitted over Query String vulnerability has b…6.2
• CVE-2025-1739An Authentication Bypass vulnerability has been found in Tri…7.1
• CVE-2025-1740Improper Restriction of Excessive Authentication Attempts vu…9.8
• CVE-2025-1741A vulnerability classified as problematic was found in b1gMa…5.1
• CVE-2025-1742A vulnerability, which was classified as problematic, has be…6.1
• CVE-2025-1744Out-of-bounds Write vulnerability in radareorg radare2 allow…9.8
• CVE-2025-1745A vulnerability has been found in LinZhaoguan pb-cms 2.0 and…5.3
• CVE-2025-1746Cross-Site Scripting vulnerability in OpenCart versions prio…6.1
• CVE-2025-1747HTML injection vulnerabilities in OpenCart versions prior to…4.7
• CVE-2025-1748HTML injection vulnerabilities in OpenCart versions prior to…4.7
• CVE-2025-1749HTML injection vulnerabilities in OpenCart versions prior to…4.7