weiphp-path-traversal: Weiphp Path Traversal

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://vulncheck.com/advisories/weiphp-path-traversal-file-read
• https://github.com/advisories/GHSA-r2vv-r3xx-x6mh
• https://nvd.nist.gov/vuln/detail/CVE-2025-34045
• https://beaglesecurity.com/blog/vulnerability/weiphp-5-0-path-traversal.html
• https://github.com/projectdiscovery/nuclei-templates/issues/13772
• https://cve.ics-csirt.io/cve/CVE-2025-34045
• https://app.opencve.io/cve/CVE-2025-34045
• https://x.com/pikpikcu/status/1360128552088182789

Related Vulnerabilities

• PoCCVE-2022-27925: Zimbra Collaboration Suite 8.8.15/9.0 - Zip Path Traversal
• PoCCVE-2026-87902: WordPress Core - PHP Template Path Traversal
• PoCCVE-2026-58467: Cockpit CMS <= 2.14.0 - Path Traversal / Local File Inclusion
• PoCCVE-2026-41948: Dify <=1.14.1 - Unauthenticated Plugin Daemon Path Traversal
• PoCCVE-2026-44177: Kirby CMS 5.3.0-5.4.0 - Path Traversal
• PoCCVE-2024-1708: ConnectWise ScreenConnect <= 23.9.7 - Path Traversal
• PoCCVE-2026-54917: SeaweedFS <= 4.29 - Path Traversal File Write
• PoCCVE-2026-25895: FUXA <= 1.2.9 - Unauthenticated Path Traversal to Arbitrary File Write
• PoCCVE-2026-55224: MineAdmin < 3.2.0-alpha.2 - Plugin Path Traversal to RCE
• PoCnodogsplash-lfi: Nodogsplash - Directory Traversal
• PoCCVE-2025-71324: Flowise - Path Traversal
• PoCCVE-2026-34908: UniFi OS - Authentication Bypass via Path Traversal (..%2f)
• PoCCVE-2026-53519: Nezha Dashboard < 2.0.13 - Path Traversal