Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-3767

OS command injection on EasyPHP Webserver

Description

An OS command injection vulnerability has been found on EasyPHP Webserver affecting version 14.1. This vulnerability could allow an attacker to get full access to the system by sending a specially crafted exploit to the /index.php?zone=settings parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

EasyPHP Webserver

Default version status: unaffected

  • 14.1affected

References