Skip to content
OpenAdvisories

Product · Phreesoft

PhreeBooks

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2021-47904

    PhreeBooks 5.2.3 - Remote Code Execution

    PhreeBooks 5.2.3 contains an authenticated file upload vulnerability in the Image Manager that allows remote code execution. Attackers can upload a malicious PHP web shell by exploiting unrestricted file type uploads to gain command execution on the server.

    Phreesoft PhreeBooks