CVE-2021-36426: Malicious File Upload
File Upload vulnerability in phpwcms 1.9.25 allows remote attackers to run arbitrary code via crafted file upload to include/inclib/general.inc.php.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-36426?
CVE-2021-36426 refers to a file upload vulnerability in phpwcms 1.9.25 that allows remote attackers to run arbitrary code.
How does CVE-2021-36426 work?
CVE-2021-36426 works by exploiting the file upload functionality of phpwcms 1.9.25, allowing remote attackers to upload and execute arbitrary code.
What is the severity of CVE-2021-36426?
CVE-2021-36426 has a severity rating of 8.8 out of 10, indicating a high severity vulnerability.
How can I fix CVE-2021-36426?
To fix CVE-2021-36426, upgrade to version 1.9.26 or later of phpwcms, as this vulnerability has been addressed in that version.
Where can I find more information about CVE-2021-36426?
You can find more information about CVE-2021-36426 at the following link: [https://github.com/slackero/phpwcms/issues/312](https://github.com/slackero/phpwcms/issues/312)