EDB-52408

PoC

Ghost CMS 5.42.1 - Path Traversal

view exploit source exploit_dbtype webappsauthor İbrahimsqlpublished 2025-08-11catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2023-32235UShigh7.5Exploit
Ghost before 5.42.1 allows remote attackers to read arbitrary files within the active theme's folder via /assets/built%2F..%2F..%2F/ directory traversal. This occurs in frontend/we…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan