Description
YesWiki是一个用PHP编写的wiki系统。squelete参数容易受到路径遍历攻击，从而允许对服务器上的任意文件进行读取访问
Yeswiki 任意文件读取 (CVE-2025-31131)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-31131
https://github.com/YesWiki/yeswiki/security/advisories/GHSA-w34w-fvp3-68xm
https://www.exploit-db.com/exploits/52135
https://www.anquanfuwu.net/article/detail/67fcde9314037f0e4935ded4
https://www.ddpoc.com/DVB-2025-9052.html
https://security.snyk.io/vuln/SNYK-PHP-YESWIKIYESWIKI-9690031
https://avd.aliyun.com/high-risk/list?page=3
https://www.sentinelone.com/vulnerability-database/cve-2025-31131/