CVE-2025-31131
HIGH NUCLEIYeswiki < 4.5.2 - Unauthenticated Path Traversal
Title source: nucleiExploitation Summary
EIP tracks 3 public exploits for CVE-2025-31131. PoCs published by Al Baradi Joy, MuhammadWaseem29, gmh5225. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates an unauthenticated path traversal vulnerability in YesWiki versions before 4.5.2. It abuses the 'squelette' parameter to read arbitrary files from the server, such as /etc/passwd, by injecting traversal sequences.
Description
YesWiki is a wiki system written in PHP. The squelette parameter is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server. This vulnerability is fixed in 4.5.2.
Exploits (3)
This exploit demonstrates an unauthenticated path traversal vulnerability in YesWiki versions before 4.5.2. It abuses the 'squelette' parameter to read arbitrary files from the server, such as /etc/passwd, by injecting traversal sequences.
This is a functional exploit for CVE-2025-31131, an unauthenticated path traversal vulnerability in YesWiki < 4.5.2. The exploit reads arbitrary files via the `squelette` parameter and includes both a Python script for automated scanning and manual Burp Suite instructions.
This repository contains a Python-based exploit for CVE-2025-31131, a path traversal vulnerability in YesWiki versions prior to 4.5.2. The exploit allows unauthenticated attackers to read arbitrary files on the server by manipulating the 'squelette' parameter.
Nuclei Templates (1)
html:"yeswiki"
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N