CVE-2024-39171

PoC —

CVSS 3.1

9.8 critical

EPSS

1%p67

Published

Jul 9, 2024 (Jul 9, 2024)

Modified

Jul 9, 2026

Description

Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks, which can lead to code execution via writing specific statements to .htaccess and code to a file with a .png suffix.

Vendors: phpvibe
Products: phpvibe
Weakness: CWE-22, CWE-35
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.