Medium severity5.3NVD Advisory· Published Sep 15, 2025· Updated Jun 17, 2026
CVE-2025-10472
CVE-2025-10472
Description
A vulnerability has been found in harry0703 MoneyPrinterTurbo up to 1.2.6. The impacted element is the function download_video/stream_video of the file app/controllers/v1/video.py of the component URL Handler. The manipulation of the argument file_path leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected products
31.2.0+ 2 more
- (no CPE)range: 1.2.0
- cpe:2.3:a:harry0703:moneyprinterturbo:*:*:*:*:*:*:*:*range: <=1.2.6
- (no CPE)range: <=1.2.6
Patches
Vulnerability mechanics
References
5- www.notion.so/Path-Traversal-Vulnerability-in-MoneyPrinterTurbo-1-2-6-265014c4d9ca80e38da4deaeee8b46f5nvdExploitThird Party Advisory
- www.notion.so/Path-Traversal-Vulnerability-in-MoneyPrinterTurbo-1-2-6-265014c4d9ca80e38da4deaeee8b46f5nvdExploitThird Party Advisory
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdPermissions RequiredVDB Entry
News mentions
0No linked articles in our index yet.