Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-15066

Arbitrary File Download through Path Traversal in Innorix WP

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Missing Authorization vulnerability in Innorix WP allows Path Traversal.This issue affects Innorix WP from All versions If the "exam" directory exists under the directory where the product is installed (ex: innorix/exam)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Innorix Innorix WP

Default version status: unknown

  • 0 to < *unknown

References