CVE-2020-36970 - PMB 5.6 - 'chemin' Local File Disclosure

CVE ID : CVE-2020-36970 Published : Jan. 28, 2026, 6:16 p.m. | 42 minutes ago Description : PMB 5.6 contains a local file disclosure vulnerability in getgif.php that allows attackers to read arbitrary system files by manipulating the 'chemin' parameter. Attackers can exploit the unsanitized file path input to access sensitive files like /etc/passwd by sending crafted requests to the getgif.php endpoint. Severity: 8.4 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...