Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: EasyPHP Component: Webserver Clear all filters
TI-2023-30227 CVE-2023-53944 · GHSA-8c7w-wmmg-f7mj

EasyPHP Webserver 14.1 Path Traversal via Directory Traversal Sequences

Priority MEDIUM 64

EasyPHP Webserver 14.1 contains a path traversal vulnerability that allows remote users with low privileges to access files outside the document root by bypassing SecurityManager restrictions.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00951 Published 2025-12-18 No fix listed CWE-22
TI-2023-30224 CVE-2023-53941 · GHSA-gfch-mrxg-f2gq

EasyPHP Webserver 14.1 Remote Code Execution

Priority HIGH 81

EasyPHP Webserver 14.1 contains an OS command injection vulnerability that allows unauthenticated attackers to execute arbitrary system commands by injecting malicious payloads through the app_service_control parameter.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.06387 Published 2025-12-18 No fix listed CWE-78
TI-2024-10389 CVE-2024-11215 · GHSA-h76p-cpvc-jjj8

Path traversal vulnerability in EasyPHP

Priority LOW 30

Absolute path traversal (incorrect restriction of a path to a restricted directory) vulnerability in the EasyPHP web server, affecting version 14.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00759 Published 2024-11-14 No fix listed CWE-22
TI-2023-03520 CVE-2023-3767 · GHSA-2v7x-3r8r-xgw9

OS command injection on EasyPHP Webserver

Priority MEDIUM 52

An OS command injection vulnerability has been found on EasyPHP Webserver affecting version 14.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01787 Published 2023-09-26 No fix listed CWE-78