Michalc PDW File Browser vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Michalc PDW File Browser: 1 record(s), with affected versions and fixes.

CVE-2020-36973 Medium · 6.5 CWE-434 Jan 28, 2026

PDW File Browser 1.3 - Remote Code Execution

PDW File Browser 1.3 contains a remote code execution vulnerability that allows authenticated users to upload and rename webshell files to arbitrary web server locations. Attackers can upload a .txt webshell, rename it to .php, and move it to accessible directories using double-encoded path traversal techniques.