← CVE Intelligence

CVE-2025-46359

Alfasado Inc. / PowerCMS PUBLISHED

Description (CNA)

A path traversal issue exists in backup and restore feature of multiple versions of PowerCMS. A product administrator may execute arbitrary code by restoring a crafted backup file.

Affected (CNA)

Vendor / productVersions
Alfasado Inc. / PowerCMSaffected 6.7 and earlier (PowerCMS 6.x series)
Alfasado Inc. / PowerCMSaffected 5.3 and earlier (PowerCMS 5.x series)
Alfasado Inc. / PowerCMSaffected 4.6 and earlier (PowerCMS 4.x series)

CWE

CWE-22

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.