critical9.8
CVE-2021-36424
An issue discovered in phpwcms 1.9.25 allows remote attackers to run arbitrary code via DB user field during installation.
Impact
An issue discovered in phpwcms 1.9.25 allows remote attackers to run arbitrary code via DB user field during installation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpwcms | Phpwcms | before 1.9.26 |