CVE-2018-25439
MetInfo CMS 6.0.0 before 6.1.1 contains a path traversal vulnerability in /include/thumb.php that…
- Risk score
- 68/100
- CVSS
- 7.5 v3.1
- Exploit chance (30 days)
- 0.5%
- Published
- 22 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- MetInfo CMS 6.0.0 before 6.1.1 contains a path traversal vulnerability in /include/thumb.php that allows unauthenticated attackers to read arbitrary files via the dir parameter.
- Affected
- {'product': 'MetInfo CMS', 'versions': '6.0.0 before 6.1.1'}
- Fix
- Check the linked advisory for details on the fix.
- Exploitation
- Exploited in the wild
Why it is Amber
- CVSS 7.5 high
- Remotely exploitable without logging in
- On your watchlist: php
References
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/other/metinfo-lfi.yaml
- https://web.archive.org/web/20190916061234/https://paper.seebug.org/676/
- https://www.metinfo.cn/
- https://www.vulncheck.com/advisories/metinfo-cms-6.1.1-unauthenticated-path-traversal-via-thumb-php-dir-parameter
Original description
MetInfo CMS 6.0.0 before 6.1.1 contains a path traversal vulnerability in /include/thumb.php that allows unauthenticated attackers to read arbitrary files via the dir parameter. Attackers can send crafted requests with backslash sequences bypassing the str_replace filter to read files like config_db.php on Windows. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-14.
Last activity 22 Oct 2026. Patch Forecast updates every hour.