← Database

CVE-2021-36425

MEDIUM CVSS: 5.4 Published: 2023-02-03 Modified: 2026-06-17

Description

Directory traversal vulnerability in phpcms 1.9.25 allows remote attackers to delete arbitrary files via unfiltered $file parameter to unlink method in include/inc_act/act_ftptakeover.php file.

Affected Platforms

Phpwcms Phpwcms

Weakness Type

CWE-22, CWE-22

References