{"id":"CVE-2026-110025","state":"PUBLISHED","title":"slackero phpwcms Extension Check cnt23.article.inc.php unrestricted upload","description":"A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. This issue affects some unknown processing of the file include/inc_front/content/cnt23.article.inc.php of the component Extension Check. This manipulation of the argument POST_name causes unrestricted upload. The attack can be initiated remotely. Upgrading to version 1.9.50 and 1.12.4 is capable of addressing this issue. Patch name: 118c978430f5a9668b30535f6e592c7ae8df711f/f4c136b467565b2d16ebe2b8276b9a03547a9a69/8571cb47df8d66804d1eb88ae3d1ab4fb513e1e7. Upgrading the affected component is recommended.","publishedAt":"2026-10-13T15:41:34.677Z","updatedAt":"2026-10-15T15:11:53.863Z","severity":{"score":6.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X","source":"VulDB"},"assigner":"VulDB","products":["slackero phpwcms"],"affected":[{"vendor":"slackero","product":"phpwcms","versions":[{"version":"1.9.0","status":"affected"},{"version":"1.9.1","status":"affected"},{"version":"1.9.2","status":"affected"},{"version":"1.9.3","status":"affected"},{"version":"1.9.4","status":"affected"},{"version":"1.9.5","status":"affected"},{"version":"1.9.6","status":"affected"},{"version":"1.9.7","status":"affected"},{"version":"1.9.8","status":"affected"},{"version":"1.9.9","status":"affected"},{"version":"1.9.10","status":"affected"},{"version":"1.9.11","status":"affected"},{"version":"1.9.12","status":"affected"},{"version":"1.9.13","status":"affected"},{"version":"1.9.14","status":"affected"},{"version":"1.9.15","status":"affected"},{"version":"1.9.16","status":"affected"},{"version":"1.9.17","status":"affected"},{"version":"1.9.18","status":"affected"},{"version":"1.9.19","status":"affected"},{"version":"1.9.20","status":"affected"},{"version":"1.9.21","status":"affected"},{"version":"1.9.22","status":"affected"},{"version":"1.9.23","status":"affected"},{"version":"1.9.24","status":"affected"},{"version":"1.9.25","status":"affected"},{"version":"1.9.26","status":"affected"},{"version":"1.9.27","status":"affected"},{"version":"1.9.28","status":"affected"},{"version":"1.9.29","status":"affected"},{"version":"1.9.30","status":"affected"},{"version":"1.9.31","status":"affected"},{"version":"1.9.32","status":"affected"},{"version":"1.9.33","status":"affected"},{"version":"1.9.34","status":"affected"},{"version":"1.9.35","status":"affected"},{"version":"1.9.36","status":"affected"},{"version":"1.9.37","status":"affected"},{"version":"1.9.38","status":"affected"},{"version":"1.9.39","status":"affected"},{"version":"1.9.40","status":"affected"},{"version":"1.9.41","status":"affected"},{"version":"1.9.42","status":"affected"},{"version":"1.9.43","status":"affected"},{"version":"1.9.44","status":"affected"},{"version":"1.9.45","status":"affected"},{"version":"1.9.46","status":"affected"},{"version":"1.9.47","status":"affected"},{"version":"1.9.48","status":"affected"},{"version":"1.9.49","status":"affected"},{"version":"1.12.0","status":"affected"},{"version":"1.12.1","status":"affected"},{"version":"1.12.2","status":"affected"},{"version":"1.12.3","status":"affected"},{"version":"1.9.50","status":"unaffected"},{"version":"1.12.4","status":"unaffected"}],"cpes":["cpe:2.3:a:phpwcms:phpwcms:*:*:*:*:*:*:*:*"],"modules":["Extension Check"]}],"references":["https://vuldb.com/vuln/417752","https://vuldb.com/vuln/417752/cti","https://vuldb.com/cve/CVE-2026-110025","https://vuldb.com/submit/992814","https://github.com/slackero/phpwcms/security/advisories/GHSA-2c7r-324f-fxm4","https://github.com/slackero/phpwcms/commit/f4c136b467565b2d16ebe2b8276b9a03547a9a69","https://github.com/slackero/phpwcms/releases/tag/v1.12.4","https://github.com/slackero/phpwcms/"],"weaknesses":["CWE-434","CWE-284"],"ingestedAt":"2026-10-29T20:10:33.477Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/110xxx/CVE-2026-110025.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-110025","state":"PUBLISHED","datePublished":"2026-10-13T15:41:34.677Z","dateUpdated":"2026-10-15T15:11:53.863Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-10-13T15:10:51.929Z"},"containers":{"cna":{"title":"slackero phpwcms Extension Check cnt23.article.inc.php unrestricted upload","descriptions":[{"lang":"en","value":"A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. This issue affects some unknown processing of the file include/inc_front/content/cnt23.article.inc.php of the component Extension Check. This manipulation of the argument POST_name causes unrestricted upload. The attack can be initiated remotely. Upgrading to version 1.9.50 and 1.12.4 is capable of addressing this issue. Patch name: 118c978430f5a9668b30535f6e592c7ae8df711f/f4c136b467565b2d16ebe2b8276b9a03547a9a69/8571cb47df8d66804d1eb88ae3d1ab4fb513e1e7. Upgrading the affected component is recommended."}],"affected":[{"vendor":"slackero","product":"phpwcms","versions":[{"version":"1.9.0","status":"affected"},{"version":"1.9.1","status":"affected"},{"version":"1.9.2","status":"affected"},{"version":"1.9.3","status":"affected"},{"version":"1.9.4","status":"affected"},{"version":"1.9.5","status":"affected"},{"version":"1.9.6","status":"affected"},{"version":"1.9.7","status":"affected"},{"version":"1.9.8","status":"affected"},{"version":"1.9.9","status":"affected"},{"version":"1.9.10","status":"affected"},{"version":"1.9.11","status":"affected"},{"version":"1.9.12","status":"affected"},{"version":"1.9.13","status":"affected"},{"version":"1.9.14","status":"affected"},{"version":"1.9.15","status":"affected"},{"version":"1.9.16","status":"affected"},{"version":"1.9.17","status":"affected"},{"version":"1.9.18","status":"affected"},{"version":"1.9.19","status":"affected"},{"version":"1.9.20","status":"affected"},{"version":"1.9.21","status":"affected"},{"version":"1.9.22","status":"affected"},{"version":"1.9.23","status":"affected"},{"version":"1.9.24","status":"affected"},{"version":"1.9.25","status":"affected"},{"version":"1.9.26","status":"affected"},{"version":"1.9.27","status":"affected"},{"version":"1.9.28","status":"affected"},{"version":"1.9.29","status":"affected"},{"version":"1.9.30","status":"affected"},{"version":"1.9.31","status":"affected"},{"version":"1.9.32","status":"affected"},{"version":"1.9.33","status":"affected"},{"version":"1.9.34","status":"affected"},{"version":"1.9.35","status":"affected"},{"version":"1.9.36","status":"affected"},{"version":"1.9.37","status":"affected"},{"version":"1.9.38","status":"affected"},{"version":"1.9.39","status":"affected"},{"version":"1.9.40","status":"affected"},{"version":"1.9.41","status":"affected"},{"version":"1.9.42","status":"affected"},{"version":"1.9.43","status":"affected"},{"version":"1.9.44","status":"affected"},{"version":"1.9.45","status":"affected"},{"version":"1.9.46","status":"affected"},{"version":"1.9.47","status":"affected"},{"version":"1.9.48","status":"affected"},{"version":"1.9.49","status":"affected"},{"version":"1.12.0","status":"affected"},{"version":"1.12.1","status":"affected"},{"version":"1.12.2","status":"affected"},{"version":"1.12.3","status":"affected"},{"version":"1.9.50","status":"unaffected"},{"version":"1.12.4","status":"unaffected"}],"cpes":["cpe:2.3:a:phpwcms:phpwcms:*:*:*:*:*:*:*:*"],"modules":["Extension Check"]}],"references":[{"url":"https://vuldb.com/vuln/417752","name":"VDB-417752 | slackero phpwcms Extension Check cnt23.article.inc.php unrestricted upload","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/vuln/417752/cti","name":"VDB-417752 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/cve/CVE-2026-110025","name":"CVE-2026-110025 | CVE Analysis and Report","tags":["third-party-advisory"]},{"url":"https://vuldb.com/submit/992814","name":"Submit #992814 | slackero phpwcms <= 1.12.3 Unrestricted Upload / Remote Code Execution (CWE-434)","tags":["third-party-advisory"]},{"url":"https://github.com/slackero/phpwcms/security/advisories/GHSA-2c7r-324f-fxm4","tags":["related"]},{"url":"https://github.com/slackero/phpwcms/commit/f4c136b467565b2d16ebe2b8276b9a03547a9a69","tags":["patch"]},{"url":"https://github.com/slackero/phpwcms/releases/tag/v1.12.4","tags":["patch"]},{"url":"https://github.com/slackero/phpwcms/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":7.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C","baseSeverity":"HIGH"}},{"cvssV3_0":{"version":"3.0","baseScore":7.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C","baseSeverity":"HIGH"}},{"cvssV2_0":{"version":"2.0","baseScore":7.5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P/E:ND/RL:OF/RC:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-434","type":"CWE","lang":"en","description":"Unrestricted Upload"}]},{"descriptions":[{"cweId":"CWE-284","type":"CWE","lang":"en","description":"Improper Access Controls"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-10-13T15:41:34.677Z"},"timeline":[{"time":"2026-10-03T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-10-03T00:00:00.000Z","lang":"en","value":"Countermeasure disclosed"},{"time":"2026-10-13T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-10-13T17:46:19.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"fernando viana (VulDB User)","type":"reporter"}],"tags":["x_open-source"],"x_generator":["VulDB PVTS v202610"]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-10-15T14:52:16.401357Z","id":"CVE-2026-110025","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-10-15T15:11:53.863Z"}}]}}}