An arbitrary file rename vulnerability in the /admin/filer.php component of EasyImages 2.0 v2.8.6 and below allows attackers with Administrator privileges to execute a…

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Dec 11, 2025 · NIST NVD

   Detected

   An arbitrary file rename vulnerability in the /admin/filer.php component of EasyImages 2.0 v2.8.6 and below allows attackers with Administrator privileges to execute arbitrary code via injecting a crafted payload into an uploaded file name.

2. Oct 14, 2026 · NIST NVD

   Updated

   An arbitrary file rename vulnerability in the /admin/filer.php component of EasyImages 2.0 v2.8.6 and below allows attackers with Administrator privileges to execute arbitrary code via injecting a crafted payload into an uploaded file name.

Affected

• cpe easyimages2.0 project/easyimages2.0version unspecified

Sources

• CVE.orgVulnerability recordCVE-2025-65473

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2025-65473

  30-day exploitation probability 0.6%

  first.org
• NIST NVDVulnerability recordCVE-2025-65473

  An arbitrary file rename vulnerability in the /admin/filer.php component of EasyImages 2.0 v2.8.6 and below allows attackers with Administrator privileges to execute arbitrary code via injecting a crafted payload into an uploaded file name.

  nvd.nist.gov

References

• Exploit · congsec.cn
• Exploit · gist.github.com