Skip to content
OpenAdvisories

Product · Phreesoft

PhreeBooks ERP

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2019-25647

    PhreeBooks ERP 5.2.3 Remote Code Execution via Image Manager

    PhreeBooks ERP 5.2.3 contains a remote code execution vulnerability in the image manager that allows authenticated attackers to upload and execute arbitrary PHP files by bypassing file extension controls. Attackers can upload malicious PHP files through the i…

    Phreesoft PhreeBooks ERP
  • High 8.8
    CVE-2019-25630

    PhreeBooks ERP 5.2.3 Arbitrary File Upload via Image Manager

    PhreeBooks ERP 5.2.3 contains an arbitrary file upload vulnerability in the Image Manager component that allows authenticated attackers to upload malicious files by submitting requests to the image upload endpoint. Attackers can upload PHP files through the i…

    Phreesoft PhreeBooks ERP