← Database

CVE-2025-11023

CRITICAL CVSS: 9.8 Published: 2025-10-23 Modified: 2026-06-17

Description

Inclusion of Functionality from Untrusted Control Sphere, Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ArkSigner Software and Hardware Inc. AcBakImzala allows PHP Local File Inclusion. This issue affects AcBakImzala: before v5.1.4.

Affected Platforms

Unknown

Weakness Type

CWE-98, CWE-829

References