Skip to content
OpenAdvisories

Vendor

icret

5 known vulnerabilities.

Products

EasyImages 2 EasyImages2.0 1 icret/easyimages2.0 1 EasyImage 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-117566

    EasyImages2.0 through 2.8.6 Unauthenticated Path Traversal via down.php, thumb.php and info.php

    EasyImages2.0 through 2.8.6 contains an unauthenticated path traversal vulnerability in app/down.php, app/thumb.php and app/info.php that allows reading files outside the upload directory. Attackers can supply ../ sequences in the dw, history or img parameter…

    icret EasyImages2.0
  • Medium 6.5
    CVE-2026-116223

    icret EasyImage del.php privileges management

    A flaw has been found in icret EasyImage up to 2.8.7. The impacted element is an unknown function of the file app/del.php. Executing a manipulation of the argument hash can lead to improper privilege management. The attack can be launched remotely. The exploi…

    icret EasyImage
  • Medium 5.4
    CVE-2023-1181

    Cross-site Scripting (XSS) - Stored in icret/easyimages2.0

    Cross-site Scripting (XSS) - Stored in GitHub repository icret/easyimages2.0 prior to 2.6.7.

    icret icret/easyimages2.0