Security Advisory
CVE-2021-36425
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Directory traversal vulnerability in phpcms 1.9.25 allows remote attackers to delete arbitrary files via unfiltered $file parameter to unlink method in include/inc_act/act_ftptakeover.php file.