Security Advisory

CVE-2025-6866

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-06-29 18:02:05
Last updated 2025-06-30 15:34:48
Assigner VulDB
CVSS score not scored
State PUBLISHED

Description

A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. This vulnerability affects unknown code of the file /forum_downloadfile.php. The manipulation of the argument filename leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.