CVE-2012-10037
NONE—CVSS v3
—CVSS v2
75.14%
EPSS (exploit probability)
CWE-78CWE
Description
PhpTax version 0.8 contains a remote code execution vulnerability in drawimage.php. The pfilez GET parameter is unsafely passed to the exec() function without sanitization. A remote attacker can inject arbitrary shell commands, leading to code execution under the web server's context. No authentication is required.
Affected routers (0)
No routers currently mapped to this CVE in our database.