CVE-2026-110025 PUBLISHED

slackero phpwcms Extension Check cnt23.article.inc.php unrestricted upload

Assigner: VulDB
Reserved: 13.10.2026 Published: 13.10.2026 Updated: 13.10.2026

A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. This issue affects some unknown processing of the file include/inc_front/content/cnt23.article.inc.php of the component Extension Check. This manipulation of the argument POST_name causes unrestricted upload. The attack can be initiated remotely. Upgrading to version 1.9.50 and 1.12.4 is capable of addressing this issue. Patch name: 118c978430f5a9668b30535f6e592c7ae8df711f/f4c136b467565b2d16ebe2b8276b9a03547a9a69/8571cb47df8d66804d1eb88ae3d1ab4fb513e1e7. Upgrading the affected component is recommended.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
CVSS Score: 6.9

Product Status

Vendor slackero
Product phpwcms
Versions
  • Version 1.9.0 is affected
  • Version 1.9.1 is affected
  • Version 1.9.2 is affected
  • Version 1.9.3 is affected
  • Version 1.9.4 is affected
  • Version 1.9.5 is affected
  • Version 1.9.6 is affected
  • Version 1.9.7 is affected
  • Version 1.9.8 is affected
  • Version 1.9.9 is affected
  • Version 1.9.10 is affected
  • Version 1.9.11 is affected
  • Version 1.9.12 is affected
  • Version 1.9.13 is affected
  • Version 1.9.14 is affected
  • Version 1.9.15 is affected
  • Version 1.9.16 is affected
  • Version 1.9.17 is affected
  • Version 1.9.18 is affected
  • Version 1.9.19 is affected
  • Version 1.9.20 is affected
  • Version 1.9.21 is affected
  • Version 1.9.22 is affected
  • Version 1.9.23 is affected
  • Version 1.9.24 is affected
  • Version 1.9.25 is affected
  • Version 1.9.26 is affected
  • Version 1.9.27 is affected
  • Version 1.9.28 is affected
  • Version 1.9.29 is affected
  • Version 1.9.30 is affected
  • Version 1.9.31 is affected
  • Version 1.9.32 is affected
  • Version 1.9.33 is affected
  • Version 1.9.34 is affected
  • Version 1.9.35 is affected
  • Version 1.9.36 is affected
  • Version 1.9.37 is affected
  • Version 1.9.38 is affected
  • Version 1.9.39 is affected
  • Version 1.9.40 is affected
  • Version 1.9.41 is affected
  • Version 1.9.42 is affected
  • Version 1.9.43 is affected
  • Version 1.9.44 is affected
  • Version 1.9.45 is affected
  • Version 1.9.46 is affected
  • Version 1.9.47 is affected
  • Version 1.9.48 is affected
  • Version 1.9.49 is affected
  • Version 1.12.0 is affected
  • Version 1.12.1 is affected
  • Version 1.12.2 is affected
  • Version 1.12.3 is affected
  • Version 1.9.50 is unaffected
  • Version 1.12.4 is unaffected

Credits

  • fernando viana (VulDB User) reporter

References

Problem Types

  • Unrestricted Upload CWE
  • Improper Access Controls CWE