mojoPortal imagehandler存在任意文件读取漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-28367
• https://avd.aliyun.com/detail?id=AVD-2025-28367
• https://www.0xlanks.me/blog/cve-2025-28367-advisory/
• https://github.com/advisories/GHSA-q332-7cfx-q6r5
• https://pentest-tools.com/vulnerabilities-exploits/mojoportal-2901-directory-traversal_27002
• https://avd.aliyun.com/product?prod=mojoportal
• https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-28367.yaml

Related Vulnerabilities

• PoCCVE-2017-0929: DotNetNuke (DNN) ImageHandler <9.2.0 - Server-Side Request Forgery
• PoCCVE-2023-24322: mojoPortal 2.7.0.0 - Cross-Site Scripting
• PoCCVE-2023-44012: mojoPortal v.2.7.0.0 - Cross-Site Scripting
• PoCCVE-2025-28367: mojoPortal <=2.9.0.1 - Directory Traversal
• MojoPortal /api/BetterImageGallery/imagehandler 文件读取漏洞（CVE-2025-28367）
• 一体化平台 UploadImageHandler 任意文件上传漏洞
• mojoPortal-XSS(CVE-2023-24322)