← CVE Intelligence

CVE-2025-41396

Alfasado Inc. / PowerCMS PUBLISHED

Description (CNA)

A path traversal issue exists in file uploading feature of multiple versions of PowerCMS. Arbitrary files may be overwritten by a product user.

Affected (CNA)

Vendor / productVersions
Alfasado Inc. / PowerCMSaffected 6.7 and earlier (PowerCMS 6.x series)
Alfasado Inc. / PowerCMSaffected 5.3 and earlier (PowerCMS 5.x series)
Alfasado Inc. / PowerCMSaffected 4.6 and earlier (PowerCMS 4.x series)

CWE

CWE-22

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.