Lucene search
HistoryFeb 03, 2023 - 6:15 p.m.
CVE-2021-36425
phpcms
directory traversal
remote attackers
unlink method
file deletion
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
AI Score
5.6
Confidence
High
EPSS
0.001
Percentile
48.5%
Directory traversal vulnerability in phpcms 1.9.25 allows remote attackers to delete arbitrary files via unfiltered $file parameter to unlink method in include/inc_act/act_ftptakeover.php file.
Affected configurations
Node
phpwcmsphpwcmsRange<1.9.26
References
Related
cve
cve
CVE-2021-36425
2023-02-03 18:15:09
prion
prion
Directory traversal
2023-02-03 18:15:00
cvelist
cvelist
CVE-2021-36425
2023-02-03 00:00:00
cnvd
cnvd
phpwcms directory traversal vulnerability
2023-02-10 00:00:00
osv
osv
CVE-2021-36425
2023-02-03 18:15:09
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
AI Score
5.6
Confidence
High
EPSS
0.001
Percentile
48.5%
Related for NVD:CVE-2021-36425