ZeroDay Findings
Sign inSign up

Findings

CVE-2025-65474

An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via renaming a…

Published Dec 11, 2025 · updated Oct 14, 2026 · easyimages2.0 project easyimages2.0

An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via renaming a PHP file to a SVG format.

Timeline

Detection, updates, and resolution for this record.

  1. Dec 11, 2025 · NIST NVD

    Detected

    An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via renaming a PHP file to a SVG format.

  2. Oct 14, 2026 · NIST NVD

    Updated

    An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via renaming a PHP file to a SVG format.

Affected

  • cpe easyimages2.0 project/easyimages2.0version unspecified

Sources

  • CVE.orgCVE-2025-65474

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2025-65474

    30-day exploitation probability 0.5%

    first.org
  • NIST NVDCVE-2025-65474

    An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via renaming a PHP file to a SVG format.

    nvd.nist.gov

References