Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
PhreeBooks ERP 5.2.3 contains a remote code execution vulnerability in the image manager that allows authenticated attackers to upload and execute arbitrary PHP files by bypassing file extension controls. Attackers can upload malicious PHP files through the image manager endpoint and execute them to establish reverse shell connections and execute system commands.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2019-25647 PhreeBooks ERP 5.2.3 contains a remote code execution vulnerability in the image manager that allows authenticated attackers to upload and execute arbitrary PHP files… https://www.cve.org/CVERecord?id=CVE-2019-25647
Post summary
The post discloses a remote code execution flaw in PhreeBooks ERP 5.2.3's image manager that allows authenticated attackers to upload and run arbitrary PHP files.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2019-25647 - PhreeBooks ERP 5.2.3 Remote Code Execution via Image Manager Intel Report: https://ift.tt/pSjm7JN
Post summary
The notice announces CVE-2019-25647, a remote code execution vulnerability in PhreeBooks ERP 5.2.3’s Image Manager, with no evidence of exploit code, active attacks, patches, or debunking.
[CVE-2019-25647: HIGH] Critical remote code execution vulnerability in PhreeBooks ERP 5.2.3! Attackers can upload and execute PHP files via the image manager, bypassing controls to establish reverse shells.#cve,CVE-2019-25647,#cybersecurity https://cvefind.com/CVE-2019-25647
Post summary
The post announces CVE-2019-25647, a critical remote code execution flaw in PhreeBooks ERP 5.2.3 that permits uploading and executing PHP files through the image manager.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | phreesoft | phreebookserp | 5.2.3 | - | - |