CVE-2023-36994

PoC —

CVSS 3.1

9.8 critical

EPSS

<1%p57

Published

Jul 7, 2023 (Jul 7, 2023)

Modified

Jun 17, 2026

Description

In TravianZ 8.3.4 and 8.3.3, Incorrect Access Control in the installation script allows an attacker to overwrite the server configuration and inject PHP code.

Vendors: travianz project
Products: travianz
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.