← Database

CVE-2021-36440

CRITICAL CVSS: 9.8 Published: 2021-09-08 Modified: 2026-06-17

Description

Unrestricted File Upload in ShowDoc v2.9.5 allows remote attackers to execute arbitrary code via the 'file_url' parameter in the component AdminUpdateController.class.php'.

Affected Platforms

Showdoc Showdoc

Weakness Type

CWE-434

References