A zip slip vulnerability in the /DesignTools/SkinList.aspx endpoint of MojoPortal CMS v2.9.0.1 allows attackers to execute arbitrary commands via uploading a crafted zip file.
Metrics
Affected Vendors & Products
References
History
Fri, 13 Feb 2026 17:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A zip slip vulnerability in the /DesignTools/SkinList.aspx endpoint of MojoPortal CMS v2.9.0.1 allows attackers to execute arbitrary commands via uploading a crafted zip file. | |
| References |
|
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-02-13T17:27:34.427Z
Reserved: 2026-01-09T00:00:00.000Z
Link: CVE-2025-69770
No data.
Status : Received
Published: 2026-02-13T18:16:18.043
Modified: 2026-02-13T18:16:18.043
Link: CVE-2025-69770
No data.
OpenCVE Enrichment
No data.