CVE-2025-69770
A zip slip vulnerability in the /DesignTools/SkinList.aspx endpoint of MojoPortal CMS v2.9.0.1 allows attackers to execute arbitrary commands via uploading a crafted zip file.
- Score
- CVSS 3.1 10.0 Critical
- Status
- Deferred - cve@mitre.org
- Published
- 2026-02-13
- Last modified
- 2026-02-13
- Weaknesses
- CWE-22
References
- https://github.com/i7MEDIA/mojoportal/security
- https://github.com/kid-tnt/Mojo-check/blob/main/Zipslip%20in%20MojoPortal%20version%202.9.0.1.md
- https://www.mojoportal.com/mojoportal-2-9-1
