Skip to content
OpenAdvisories

Vendor

PhpTax

1 known vulnerabilities.

Products

PhpTax 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2012-10037 Public exploit

    PhpTax pfilez Parameter Exec Remote Code Injection

    PhpTax version 0.8 contains a remote code execution vulnerability in drawimage.php. The pfilez GET parameter is unsafely passed to the exec() function without sanitization. A remote attacker can inject arbitrary shell commands, leading to code execution under…

    PhpTax PhpTax