Read the docs
TI-2023-30227 Aliases CVE-2023-53944GHSA-8c7w-wmmg-f7mj

EasyPHP Webserver 14.1 Path Traversal via Directory Traversal Sequences

Priority MEDIUM 64CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-22 and the CVSS impact.

Summary

EasyPHP Webserver 14.1 contains a path traversal vulnerability that allows remote users with low privileges to access files outside the document root by bypassing SecurityManager restrictions. Attackers can send GET requests with encoded directory traversal sequences like /..%5c..%5c to read system files such as /windows/win.ini.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00951 61st percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA and NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
EasyPHPEasyPHP Webserver14.1—No fix listedCNA
  • EasyPHP Webserver VendorEasyPHP Affected 14.1 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:easyphp:webserver:14.1:*:*:*:*:*:*:*14.1VulnerableEasyPHP
  • cpe:2.3:a:easyphp:webserver:14.1:*:*:*:*:*:*:* Versions 14.1 Vulnerable ·EasyPHP

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-53944
  2. 2026-10-03 Alias added: GHSA-8c7w-wmmg-f7mj

References

Exploit 1

Other 1

  • TI-2023-30224 EasyPHP Webserver 14.1 Remote Code Execution CVSS 4.0CRITICAL 9.3
  • TI-2023-03520 OS command injection on EasyPHP Webserver CVSS 3.1CRITICAL 9.8
  • TI-2024-10389 Path traversal vulnerability in EasyPHP CVSS 3.1MEDIUM 6.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences