cve/2025/CVE-2025-31131.md

CVE-2025-31131

Description

YesWiki is a wiki system written in PHP. The squelette parameter is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server. This vulnerability is fixed in 4.5.2.

POC

Reference

• https://github.com/YesWiki/yeswiki/security/advisories/GHSA-w34w-fvp3-68xm

Github

• https://github.com/ARPSyndicate/cve-scores
• https://github.com/B1ack4sh/Blackash-CVE-2025-31131
• https://github.com/MuhammadWaseem29/CVE-2025-31131
• https://github.com/PuddinCat/GithubRepoSpider
• https://github.com/nak000/CVE-2025-31131-RCE
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/plzheheplztrying/cve_monitor
• https://github.com/tanjiti/sec_profile