CVE-2023-3767

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An OS command injection vulnerability has been found on EasyPHP Webserver affecting version 14.1. This vulnerability could allow an attacker to get full access to the system by sending a specially crafted exploit to the /index.php?zone=settings parameter.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published
Sep 27, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-376779.8Pligg CMS v2.0.2 (also known as Kliqqi) was discovered to contain a remote code execution (RCE) vulnerability in the component admin_editor.CVE-2023-376799.8A remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary commands on the hostingCVE-2023-37687.5Incorrect data input validation vulnerability, which could allow an attacker with access to the network to implement fuzzing techniques thatCVE-2023-376829.8Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-jms/deductScores.php.CVE-2023-376834.8Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Profile Page of the Admin.CVE-2023-376844.8Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Search Report Details of the AdmCVE-2023-376854.8Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Search Report Page of the Admin CVE-2023-376864.8Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add Nurse Page in the Admin portCVE-2023-376877.2Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the View Request of Nurse Page in thCVE-2023-376884.8Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Admin page.CVE-2023-376894.8Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Booking Request page.CVE-2023-37697.5Incorrect data input validation vulnerability, which could allow an attacker with access to the network to implement fuzzing techniques that
CVE-2023-3767: Critical severity, CVSS 9.8 | Vulnix