Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Phreesoft Clear all filters
TI-2019-15700 CVE-2019-25647 · GHSA-pqwf-8627-q764

PhreeBooks ERP 5.2.3 Remote Code Execution via Image Manager

Priority HIGH 73

PhreeBooks ERP 5.2.3 contains a remote code execution vulnerability in the image manager that allows authenticated attackers to upload and execute arbitrary PHP files by bypassing file extension controls.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00812 Published 2026-03-24 No fix listed CWE-434
TI-2019-15683 CVE-2019-25630 · GHSA-4f54-m9cc-h3ch

PhreeBooks ERP 5.2.3 Arbitrary File Upload via Image Manager

Priority HIGH 73

PhreeBooks ERP 5.2.3 contains an arbitrary file upload vulnerability in the Image Manager component that allows authenticated attackers to upload malicious files by submitting requests to the image upload endpoint.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00912 Published 2026-03-24 No fix listed CWE-434
TI-2021-22518 CVE-2021-47904 · GHSA-xcxf-266c-6x5q

PhreeBooks 5.2.3 - Remote Code Execution

Priority HIGH 73

PhreeBooks 5.2.3 contains an authenticated file upload vulnerability in the Image Manager that allows remote code execution.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00715 Published 2026-01-23 No fix listed CWE-434