Skip to content
Heist/ feed
High

slackero phpwcms Extension Check cnt23.article.inc.php unrestricted upload

Type: advisorySource: Official CVE List1 source record

A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. This issue affects some unknown processing of the file include/inc_front/content/cnt23.article.inc.php of the component Extension Check. This manipulation of the argument POST_name causes unrestricted upload. The attack can be initiated remotely. Upgrading to version 1.9.50 and 1.12.4 is capable of addressing this issue. Patch name: 118c978430f5a9668b30535f6e592c7ae8df711f/f4c136b467565b2d16ebe2b8276b9a03547a9a69/8571cb47df8d66804d1eb88ae3d1ab4fb513e1e7. Upgrading the affected component is recommended.

Announced Source revision 1
Original source ↗

CVE-2026-110025

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-110025

phpwcms

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "cpes": [
      "cpe:2.3:a:phpwcms:phpwcms:*:*:*:*:*:*:*:*"
    ],
    "vendor": "slackero",
    "modules": [
      "Extension Check"
    ],
    "product": "phpwcms",
    "versions": [
      {
        "status": "affected",
        "version": "1.9.0"
      },
      {
        "status": "affected",
        "version": "1.9.1"
      },
      {
        "status": "affected",
        "version": "1.9.2"
      },
      {
        "status": "affected",
        "version": "1.9.3"
      },
      {
        "status": "affected",
        "version": "1.9.4"
      },
      {
        "status": "affected",
        "version": "1.9.5"
      },
      {
        "status": "affected",
        "version": "1.9.6"
      },
      {
        "status": "affected",
        "version": "1.9.7"
      },
      {
        "status": "affected",
        "version": "1.9.8"
      },
      {
        "status": "affected",
        "version": "1.9.9"
      },
      {
        "status": "affected",
        "version": "1.9.10"
      },
      {
        "status": "affected",
        "version": "1.9.11"
      },
      {
        "status": "affected",
        "version": "1.9.12"
      },
      {
        "status": "affected",
        "version": "1.9.13"
      },
      {
        "status": "affected",
        "version": "1.9.14"
      },
      {
        "status": "affected",
        "version": "1.9.15"
      },
      {
        "status": "affected",
        "version": "1.9.16"
      },
      {
        "status": "affected",
        "version": "1.9.17"
      },
      {
        "status": "affected",
        "version": "1.9.18"
      },
      {
        "status": "affected",
        "version": "1.9.19"
      },
      {
        "status": "affected",
        "version": "1.9.20"
      },
      {
        "status": "affected",
        "version": "1.9.21"
      },
      {
        "status": "affected",
        "version": "1.9.22"
      },
      {
        "status": "affected",
        "version": "1.9.23"
      },
      {
        "status": "affected",
        "version": "1.9.24"
      },
      {
        "status": "affected",
        "version": "1.9.25"
      },
      {
        "status": "affected",
        "version": "1.9.26"
      },
      {
        "status": "affected",
        "version": "1.9.27"
      },
      {
        "status": "affected",
        "version": "1.9.28"
      },
      {
        "status": "affected",
        "version": "1.9.29"
      },
      {
        "status": "affected",
        "version": "1.9.30"
      },
      {
        "status": "affected",
        "version": "1.9.31"
      },
      {
        "status": "affected",
        "version": "1.9.32"
      },
      {
        "status": "affected",
        "version": "1.9.33"
      },
      {
        "status": "affected",
        "version": "1.9.34"
      },
      {
        "status": "affected",
        "version": "1.9.35"
      },
      {
        "status": "affected",
        "version": "1.9.36"
      },
      {
        "status": "affected",
        "version": "1.9.37"
      },
      {
        "status": "affected",
        "version": "1.9.38"
      },
      {
        "status": "affected",
        "version": "1.9.39"
      },
      {
        "status": "affected",
        "version": "1.9.40"
      },
      {
        "status": "affected",
        "version": "1.9.41"
      },
      {
        "status": "affected",
        "version": "1.9.42"
      },
      {
        "status": "affected",
        "version": "1.9.43"
      },
      {
        "status": "affected",
        "version": "1.9.44"
      },
      {
        "status": "affected",
        "version": "1.9.45"
      },
      {
        "status": "affected",
        "version": "1.9.46"
      },
      {
        "status": "affected",
        "version": "1.9.47"
      },
      {
        "status": "affected",
        "version": "1.9.48"
      },
      {
        "status": "affected",
        "version": "1.9.49"
      },
      {
        "status": "affected",
        "version": "1.12.0"
      },
      {
        "status": "affected",
        "version": "1.12.1"
      },
      {
        "status": "affected",
        "version": "1.12.2"
      },
      {
        "status": "affected",
        "version": "1.12.3"
      },
      {
        "status": "unaffected",
        "version": "1.9.50"
      },
      {
        "status": "unaffected",
        "version": "1.12.4"
      }
    ]
  }
]
Related CVEs
CVE-2026-110025

Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event
#28941 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement