PHPStudy vulnerabilities

1 known vulnerability in PHPStudy from Henan Xiaopi Security Technology. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  PHPStudy: Improper Control of Generation of Code

  CVE-2025-34061Jul 3, 2025Henan Xiaopi Security TechnologyEPSS 1.94%

  A backdoor in PHPStudy versions 2016 through 2018 allows unauthenticated remote attackers to execute arbitrary PHP code on affected installations. The backdoor listens for base64-encoded PHP payloads in the Accept-Charset HTTP header of incoming requests, deco