CVE-2021-36424

CRITICAL CVSS: 9.8 Published: 2023-02-03 Modified: 2026-06-17

Description

An issue discovered in phpwcms 1.9.25 allows remote attackers to run arbitrary code via DB user field during installation.

Affected Platforms

Phpwcms Phpwcms

Weakness Type

CWE-94, CWE-94

References