CVE-2021-36425

Directory traversal vulnerability in phpcms 1.9.25 allows remote attackers to delete arbitrary files via unfiltered $file parameter to unlink method in include/incact/actftptakeover.php file...

Directory traversal

Directory traversal vulnerability in phpcms 1.9.25 allows remote attackers to delete arbitrary files via unfiltered $file parameter to unlink method in include/incact/actftptakeover.php file...

CVE-2021-36425

CVE-2021-36425 affects phpcms 1.9.25 and related entries describe a directory traversal vulnerability. An attacker can delete arbitrary files by supplying an unfiltered file parameter to the unlink call in the file path include/inc_act/act_ftptakeover.php. The connected documents confirm the vuln...

PT-2023-12268 · Phpcms · Phpcms

Name of the Vulnerable Software and Affected Versions: phpcms version 1.9.25 Description: The issue allows remote attackers to delete arbitrary files due to a directory traversal vulnerability. This is achieved by exploiting an unfiltered file parameter in the unlink method within the include/inc...