Arbitrary File Download through Path Traversal in Innorix WP
Vulnerability Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Missing Authorization vulnerability in Innorix WP allows Path Traversal.This issue affects Innorix WP from All versions If the "exam" directory exists under the directory where the product is installed (ex: innorix/exam)
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-15066
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- mak3bread(김민성, Minseong Kim)
Affected Vendor
Innorix
View all reports →