← Database

CVE-2024-39171

CRITICAL CVSS: 9.8 Published: 2024-07-09 Modified: 2026-07-09

Description

Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks, which can lead to code execution via writing specific statements to .htaccess and code to a file with a .png suffix.

Affected Platforms

Phpvibe Phpvibe

Weakness Type

CWE-22, CWE-35

References