A critical path traversal vulnerability in Alfasado Inc. PowerCMS allows authenticated administrators to achieve remote code execution, posing a severe risk to system integrity.

The application fails to properly sanitize input within the backup and restore module, which is susceptible to path traversal (CWE-22). An attacker with administrative privileges can upload a malicious backup file to execute arbitrary code on the underlying server.

Successful exploitation of this vulnerability grants an attacker the ability to execute arbitrary code with the privileges of the web application. This could lead to full system compromise, data exfiltration, or the deployment of ransomware. Given the CVSS score of 7.2, this vulnerability represents a high risk to organizational security, particularly for environments handling sensitive CMS data.

Immediate Action: Update PowerCMS to the latest patched versions (6.7.1, 5.3.1, or 4.6.1) as provided in the vendor security advisory.

Proactive Monitoring: Review application and system access logs for unusual backup file uploads or unexpected file system modifications originating from the administrative interface.

Compensating Controls: Restrict access to the administrative console to trusted IP addresses only and ensure that file upload features are monitored by security software for malicious payloads.

Public Exploit Available: Yes — a public proof-of-concept exists via a GitHub repository.

The severity of this vulnerability, combined with the availability of a public proof-of-concept, necessitates immediate action. Administrators must prioritize updating their PowerCMS installations to the versions specified by Alfasado Inc. to prevent potential unauthorized code execution and maintain the security of the CMS environment.