Skip to content

Product

phreesoft phreebookserp vulnerabilities

3 published CVES affecting phreesoft phreebookserp, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
2
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest phreesoft phreebookserp CVEs

Newest publication first

  1. CVE-2019-25647 PhreeBooks ERP 5.2.3 Remote Code Execution via Image Manager

    Published
    HighCVSS 8.7 EPSS 0.83%

    PhreeBooks ERP 5.2.3 contains a remote code execution vulnerability in the image manager that allows authenticated attackers to upload and execute arbitrary PHP files by bypassing file extension controls. Attackers can upload malicious PHP files through the image manager endpoint...

  2. CVE-2019-25630 PhreeBooks ERP 5.2.3 Arbitrary File Upload via Image Manager

    Published
    HighCVSS 8.7 EPSS 0.93%

    PhreeBooks ERP 5.2.3 contains an arbitrary file upload vulnerability in the Image Manager component that allows authenticated attackers to upload malicious files by submitting requests to the image upload endpoint. Attackers can upload PHP files through the imgFile parameter to t...

  3. CVE-2017-5990 An issue was discovered in PhreeBooksERP before 2017-02-13. The vulnerability exists due to insufficient filtration of user-supplied data in the "form" HTTP GET parameter passed to the "PhreeBooksERP-...

    Published
    MediumCVSS 6.1 EPSS 1.0%

    An issue was discovered in PhreeBooksERP before 2017-02-13. The vulnerability exists due to insufficient filtration of user-supplied data in the "form" HTTP GET parameter passed to the "PhreeBooksERP-master/extensions/ShippingMethods/ups/label_mgr/js_include.php" and "PhreeBooksE...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.