PHPVibe vulnerabilities
We track 2 vulnerabilities in PHPVibe products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 9, 2024.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest PHPVibe vulnerabilities
- 9.8 Critical severity
phpvibe: Improper Limitation of a Pathname to a Restricted Directory
Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks, which can lead to code execution via writing specific statements to .htaccess and code to a file with a .png suffix.
- 9.8 Critical severity
PHPVibe: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as critical, was found in PHPVibe 11.0.46. Affected is an unknown function of the file /app/uploading/upload-mp3.php of the component Media Upload Page. The manipulation of the argument file leads to unrestricted upload. I