CVE-2018-25421
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
May 30, 2026
Vendor
unknown
Description
Open STA Manager 2.3 contains a path traversal vulnerability that allows authenticated users to download arbitrary files by manipulating the file parameter. Attackers can send GET requests to modules/backup/actions.php with op=getfile and traverse directories using ../ sequences to access sensitive system files.