Description
PicHome是一款功能强大的开源网盘程序，它不仅能高效管理各类文件，还在图像和媒体文件管理方面表现出色。Pichome存在任意文件读取漏洞，攻击者可以读取文件获取敏感信息。
Pichome /index.php 文件读取漏洞（CVE-2025-1743）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cve.imfht.com/detail/CVE-2025-1743
https://www.ddpoc.com/DVB-2025-8965.html
https://nvd.nist.gov/vuln/detail/CVE-2025-1743
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1743.yaml
https://vuldb.com/?id.297831
https://pentest-tools.com/vulnerabilities-exploits/pichome-210-arbitrary-file-read_27104
https://www.cve.org/CVERecord?id=CVE-2025-1743
https://access.redhat.com/security/cve/cve-2025-1743