Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-41396

A path traversal issue exists in file uploading feature of multiple versions of PowerCMS. Arbitrary files may be overwritten by a product user.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jpcert

Description

A path traversal issue exists in file uploading feature of multiple versions of PowerCMS. Arbitrary files may be overwritten by a product user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Alfasado Inc. PowerCMS

  • 6.7 and earlier (PowerCMS 6.x series)affected

Alfasado Inc. PowerCMS

  • 5.3 and earlier (PowerCMS 5.x series)affected

Alfasado Inc. PowerCMS

  • 4.6 and earlier (PowerCMS 4.x series)affected

References