Lucene search

K
osvGoogleOSV:CVE-2021-36425
HistoryFeb 03, 2023 - 6:15 p.m.

CVE-2021-36425

2023-02-0318:15:09
Google
osv.dev
2
cve-2021-36425
directory traversal
phpcms 1.9.25
remote attackers
delete arbitrary files

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

48.5%

Directory traversal vulnerability in phpcms 1.9.25 allows remote attackers to delete arbitrary files via unfiltered $file parameter to unlink method in include/inc_act/act_ftptakeover.php file.

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

48.5%

Related for OSV:CVE-2021-36425