Read the docs

Phreesoft

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Phreesoft records in CISA KEV

No Phreesoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Phreebookserp 3 records HIGH

Records

3 records in Phreebookserp · all components

TI-2019-15700 CVE-2019-25647 · GHSA-pqwf-8627-q764

PhreeBooks ERP 5.2.3 Remote Code Execution via Image Manager

Priority HIGH 73

PhreeBooks ERP 5.2.3 contains a remote code execution vulnerability in the image manager that allows authenticated attackers to upload and execute arbitrary PHP files by bypassing file extension controls.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00812 Published 2026-03-24 No fix listed CWE-434
TI-2019-15683 CVE-2019-25630 · GHSA-4f54-m9cc-h3ch

PhreeBooks ERP 5.2.3 Arbitrary File Upload via Image Manager

Priority HIGH 73

PhreeBooks ERP 5.2.3 contains an arbitrary file upload vulnerability in the Image Manager component that allows authenticated attackers to upload malicious files by submitting requests to the image upload endpoint.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00912 Published 2026-03-24 No fix listed CWE-434
Open these records in search →