CVE-2025-25759

Description

An issue in the component admin_template.php of SUCMS v1.0 allows attackers to execute a directory traversal and arbitrary file deletion via a crafted GET request.

Affected Platforms

Weakness Type

CWE-22, CWE-552

References

• https://github.com/147536951/Qianyi-learn/blob/main/SUCMS.pdf