Skip to content
OpenAdvisories

Product · Henan Xiaopi Security Technology

PHPStudy

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2025-34061 Public exploit

    PHPStudy 2016-2018 Backdoor Remote Code Execution Vulnerability

    A backdoor in PHPStudy versions 2016 through 2018 allows unauthenticated remote attackers to execute arbitrary PHP code on affected installations. The backdoor listens for base64-encoded PHP payloads in the Accept-Charset HTTP header of incoming requests, dec…