5.1
Medium
CVE-2025-15589 A vulnerability was determined in MuYuCMS 2.7
Description
A vulnerability was determined in MuYuCMS 2.7. Affected is the function delete_dir_file of the file application/admin/controller/Template.php of the component Template Management Page. This manipulation of the argument temn/tp causes path traversal. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MuYuCMS | 2.7 | No fix stated |
Other CVEs of MuYuCMS
The 8 CVEs of MuYuCMS →
CVE-2025-10993
A security flaw has been discovered in MuYuCMS up to 2.7
5.1
Medium
CVE-2025-10787
A vulnerability was found in MuYuCMS up to 2.7
5.3
Medium
CVE-2023-1046
A vulnerability classified as critical has been found in MuYuCMS 2.2
6.3
Medium
CVE-2023-1045
A vulnerability was found in MuYuCMS 2.2
3.8
Low