medium5.4
CVE-2021-36425
Directory traversal vulnerability in phpcms 1.9.25 allows remote attackers to delete arbitrary files via unfiltered $file parameter to unlink method in include…
Impact
Directory traversal vulnerability in phpcms 1.9.25 allows remote attackers to delete arbitrary files via unfiltered $file parameter to unlink method in include/inc_act/act_ftptakeover.php file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpwcms | Phpwcms | before 1.9.26 |