Read the docs

Phreesoft

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Phreesoft records in CISA KEV

No Phreesoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Phreebookserp 3 records HIGH

Records

4 records

TI-2021-22518 CVE-2021-47904 · GHSA-xcxf-266c-6x5q

PhreeBooks 5.2.3 - Remote Code Execution

Priority HIGH 73

PhreeBooks 5.2.3 contains an authenticated file upload vulnerability in the Image Manager that allows remote code execution.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00715 Published 2026-01-23 No fix listed CWE-434
TI-2019-15700 CVE-2019-25647 · GHSA-pqwf-8627-q764

PhreeBooks ERP 5.2.3 Remote Code Execution via Image Manager

Priority HIGH 73

PhreeBooks ERP 5.2.3 contains a remote code execution vulnerability in the image manager that allows authenticated attackers to upload and execute arbitrary PHP files by bypassing file extension controls.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00812 Published 2026-03-24 No fix listed CWE-434
TI-2019-15683 CVE-2019-25630 · GHSA-4f54-m9cc-h3ch

PhreeBooks ERP 5.2.3 Arbitrary File Upload via Image Manager

Priority HIGH 73

PhreeBooks ERP 5.2.3 contains an arbitrary file upload vulnerability in the Image Manager component that allows authenticated attackers to upload malicious files by submitting requests to the image upload endpoint.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00912 Published 2026-03-24 No fix listed CWE-434
Open these records in search →