EP
Vendor
Easyimages2.0 Project
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-65474 | EA Easyimages2.0 Easyimages2.0 Project | 9.8 | Dec 11 | An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via renaming a PHP file to… |
| CVE-2025-65471 | EA Easyimages2.0 Easyimages2.0 Project | 8.8 | Dec 11 | An arbitrary file upload vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via uploading a crafted… |
| CVE-2025-65472 | EA Easyimages2.0 Easyimages2.0 Project | 8.8 | Dec 11 | A Cross-Site Request Forgery (CSRF) in the /admin/admin.inc.php component of EasyImages 2.0 v2.8.6 and below allows attackers to escalate privileges to Administrator via user… |
| CVE-2025-65473 | EA Easyimages2.0 Easyimages2.0 Project | 9.1 | Dec 11 | An arbitrary file rename vulnerability in the /admin/filer.php component of EasyImages 2.0 v2.8.6 and below allows attackers with Administrator privileges to execute arbitrary… |
| CVE-2025-13415 | EA Easyimages2.0 Easyimages2.0 Project | 5.4 | Nov 19 | icret EasyImages SVG Image upload.php cross site scripting |
| CVE-2023-7098 | EA Easyimages2.0 Easyimages2.0 Project | 5.3 | Dec 25 | icret EasyImages hide.php path traversal |
| CVE-2023-33599 | EA Easyimages2.0 Easyimages2.0 Project | 6.1 | May 23 | EasyImages2.0 ≤ 2.8.1 is vulnerable to Cross Site Scripting (XSS) via viewlog.php |
| CVE-2023-1181 | EA Easyimages2.0 Easyimages2.0 Project | 5.4 | Mar 5 | Cross-site Scripting (XSS) - Stored in GitHub repository icret/easyimages2.0 prior to 2.6.7 |