Description
Pichome是zyx0814个人开发者的一款图片与媒体文件管理功能强大的开源网盘程序。 Pichome 2.1.0版本存在路径遍历漏洞，该漏洞源于文件/index.php?mod=textviewer的参数src会导致路径遍历。
Pichome 路径遍历漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://avd.aliyun.com/detail?id=AVD-2025-1743
https://nvd.nist.gov/vuln/detail/CVE-2025-1743
https://vuldb.com/?id.297831
https://github.com/advisories/GHSA-v53m-h2x7-3m5p
https://cve.imfht.com/detail/CVE-2025-1743
https://pentest-tools.com/vulnerabilities-exploits/pichome-210-arbitrary-file-read_27104
https://blog.csdn.net/2301_80350265/article/details/151995927