Description

A local file inclusion (LFI) vulnerability in RiteCMS v3.1.0 allows attackers to read arbitrary files on the host via a directory traversal in the admin_language_file and default_page_language_file in the admin.php component

INFO

Published Date :

2025-12-17T00:00:00.000Z

Last Modified :

2025-12-17T18:42:17.650Z

Source :

mitre
AFFECTED PRODUCTS

The following products are affected by CVE-2025-67174 vulnerability.

Vendors Products
Ritecms
  • Ritecms
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-67174.

URL Resource
https://github.com/handylulu/RiteCMS cve-icon cve-icon
https://github.com/handylulu/RiteCMS/blob/master/admin.php#L46 cve-icon cve-icon
https://github.com/handylulu/RiteCMS/blob/master/cms/subtemplates/settings.inc.tpl#L64 cve-icon cve-icon
https://github.com/mbiesiad/vulnerability-research/tree/main/CVE-2025-67174 cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System