Log in Start free

Vulnerability · Published Jul 20, 2025 · Assigned by VulDB

CVE-2025-7896harry0703 MoneyPrinterTurbo video.py delete_video path traversal

Medium 6.3

In plain English

A medium-severity path traversal in MoneyPrinterTurbo from harry0703. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities).

Severity (CVSS 3.1)6.3Medium
Exploit odds (30 days)0.5%top 54.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A vulnerability has been found in harry0703 MoneyPrinterTurbo up to 1.2.6 and classified as critical. Affected by this vulnerability is the function download_video/delete_video of the file app/controllers/v1/video.py. The manipulation leads to path traversal. The attack can be launched remotely.

Affected products (as reported)

VendorProductVersions
harry0703 MoneyPrinterTurbo 1.2.01.2.11.2.21.2.31.2.41.2.51.2.6

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R

References