Security Advisory

CVE-2021-36425

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-02-03 00:00:00
Last updated 2025-03-26 17:33:07
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Directory traversal vulnerability in phpcms 1.9.25 allows remote attackers to delete arbitrary files via unfiltered $file parameter to unlink method in include/inc_act/act_ftptakeover.php file.