Vulnerabilities CVE-2019-25630

CVE-2019-25630

High

Open

TLP:CLEAR

PhreeBooks ERP 5.2.3 Arbitrary File Upload via Image Manager

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

PhreeBooks ERP 5.2.3 contains an arbitrary file upload vulnerability in the Image Manager component that allows authenticated attackers to upload malicious files by submitting requests to the image upload endpoint. Attackers can upload PHP files through the imgFile parameter to the bizuno/image/manager endpoint and execute them via the bizunoFS.php script for remote code execution.

Details

CVSS Score: 8.7
EPSS Score ⓘ: 0.90%

56.3th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Confidence: 90%
Published: Mar 24, 2026
Last Modified: Jul 28, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.