Webserver vulnerabilities

2 known vulnerabilities in Webserver from EasyPHP. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  EasyPHP Webserver: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-53941Dec 18, 2025EasyPHPEPSS 6.39%

  EasyPHP Webserver 14.1 contains an OS command injection vulnerability that allows unauthenticated attackers to execute arbitrary system commands by injecting malicious payloads through the app_service_control parameter. Attackers can send POST requests to /ind

• 9.8 Critical severity

  Webserver: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-3767Sep 27, 2023EasyPHPEPSS 1.79%

  An OS command injection vulnerability has been found on EasyPHP Webserver affecting version 14.1. This vulnerability could allow an attacker to get full access to the system by sending a specially crafted exploit to the /index.php?zone=settings parameter.