Read the docs

EasyPHP

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

EasyPHP records in CISA KEV

No EasyPHP vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Webserver 4 records HIGH

Records

4 records in Webserver · all components

TI-2023-30224 CVE-2023-53941 · GHSA-gfch-mrxg-f2gq

EasyPHP Webserver 14.1 Remote Code Execution

Priority HIGH 81

EasyPHP Webserver 14.1 contains an OS command injection vulnerability that allows unauthenticated attackers to execute arbitrary system commands by injecting malicious payloads through the app_service_control parameter.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.06387 Published 2025-12-18 No fix listed CWE-78
TI-2023-30227 CVE-2023-53944 · GHSA-8c7w-wmmg-f7mj

EasyPHP Webserver 14.1 Path Traversal via Directory Traversal Sequences

Priority MEDIUM 64

EasyPHP Webserver 14.1 contains a path traversal vulnerability that allows remote users with low privileges to access files outside the document root by bypassing SecurityManager restrictions.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00951 Published 2025-12-18 No fix listed CWE-22
TI-2023-03520 CVE-2023-3767 · GHSA-2v7x-3r8r-xgw9

OS command injection on EasyPHP Webserver

Priority MEDIUM 52

An OS command injection vulnerability has been found on EasyPHP Webserver affecting version 14.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01787 Published 2023-09-26 No fix listed CWE-78
TI-2024-10389 CVE-2024-11215 · GHSA-h76p-cpvc-jjj8

Path traversal vulnerability in EasyPHP

Priority LOW 30

Absolute path traversal (incorrect restriction of a path to a restricted directory) vulnerability in the EasyPHP web server, affecting version 14.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00759 Published 2024-11-14 No fix listed CWE-22
Open these records in search →