EasyPHP vulnerabilities
We track 2 vulnerabilities in EasyPHP products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 18, 2025.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest EasyPHP vulnerabilities
- 9.8 Critical severity
EasyPHP Webserver: Improper Neutralization of Special Elements used in an OS Command
EasyPHP Webserver 14.1 contains an OS command injection vulnerability that allows unauthenticated attackers to execute arbitrary system commands by injecting malicious payloads through the app_service_control parameter. Attackers can send POST requests to /ind
- 9.8 Critical severity
Webserver: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability has been found on EasyPHP Webserver affecting version 14.1. This vulnerability could allow an attacker to get full access to the system by sending a specially crafted exploit to the /index.php?zone=settings parameter.