---
id: CVE-2025-11020
title: >-
  An attacker can obtain server information using Path Traversal vulnerability
  to conduct SQL Injection, which possibly exploits Unrestricted Upload of File
  with Dangerous Type vulnerability in MarkAny SafePC Enterprise on Windows,
  Linux.T…
summary: >-
  An attacker can obtain server information using Path Traversal vulnerability
  to conduct SQL Injection, which possibly exploits Unrestricted Upload of File
  with Dangerous Type vulnerability in MarkAny SafePC Enterprise on Windows,
  Linux.T…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-22
  - CWE-89
  - CWE-434
published: '2025-10-02'
updated: '2026-10-12'
sourceUpdated: '2026-10-12T15:10:00.207'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-11020'
references:
  - url: >-
      https://www.markany.com/enterprisesecurity?utm_campaign=markany_sa&utm_source=google_pc&utm_medium=gsa_pc&utm_term=cybersecurity&utm_content=&gad_source=1&gad_campaignid=21853187406&gbraid=0AAAAADOrb0lM8ZHyDytvnVwj9T--km9aM&gclid=Cj0KCQjwovPGBhDxARIsAFhgkwSh0F9hnsAoRTS8OnFI3KcF4_UMarYchq0uP5V1DiSQyKKVLdZPJNYaAiBuEALw_wcB
    label: 09832df1-09c1-45b4-8a85-16c601d30feb
tags:
  - nvd
epss: 0.00301
epssPercentile: 0.21095
ingestedAt: '2026-10-12T15:55:08.069Z'
---

## Overview

An attacker can obtain server information using Path Traversal vulnerability to conduct SQL Injection, which possibly exploits Unrestricted Upload of File with Dangerous Type vulnerability in MarkAny SafePC Enterprise on Windows, Linux.This issue affects SafePC Enterprise: V7.0.* (V7.0.YYYY.MM.DD) before V7.0.1, and V5.*.*.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.