Vulnerability CVE-2021-36425


Published: 2023-02-03

Description:
Directory traversal vulnerability in phpcms 1.9.25 allows remote attackers to delete arbitrary files via unfiltered $file parameter to unlink method in include/inc_act/act_ftptakeover.php file.

 References:
https://github.com/slackero/phpwcms/issues/311

Copyright 2026, cxsecurity.com

 

Back to Top