Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2025-46359

A path traversal issue exists in backup and restore feature of multiple versions of PowerCMS. A product administrator may execute arbitrary code by restoring a crafted backup file.

Description

A path traversal issue exists in backup and restore feature of multiple versions of PowerCMS. A product administrator may execute arbitrary code by restoring a crafted backup file.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Alfasado Inc. PowerCMS

  • 6.7 and earlier (PowerCMS 6.x series)affected

Alfasado Inc. PowerCMS

  • 5.3 and earlier (PowerCMS 5.x series)affected

Alfasado Inc. PowerCMS

  • 4.6 and earlier (PowerCMS 4.x series)affected

References