Description
Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks, which can lead to code execution via writing specific statements to .htaccess and code to a file with a .png suffix.
High · 8.8
CVE-2024-39171
EUVD-2024-37857GHSA-fmmx-7c8x-cqv9
Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks, which can lead to code execution via writi…
Published Jul 9, 2024 · Updated Jul 9, 2026 · Assigned by mitre