CVE-2020-36973 - PDW File Browser 1.3 - Remote Code Execution

CVE-2020-36973 - PDW File Browser 1.3 - Remote Code Execution

CVE ID : CVE-2020-36973 Published : Jan. 28, 2026, 6:16 p.m. | 42 minutes ago Description : PDW File Browser 1.3 contains a remote code execution vulnerability that allows authenticated users to upload and rename webshell files to arbitrary web server locations. Attackers can upload a .txt webshell, rename it to .php, and move it to accessible directories using double-encoded path traversal techniques. Severity: 8.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
HIGH
Published
Jan. 28, 2026
Affected Product: php
Impact: remote code execution