| Package | Affected versions | Patched versions |
|---|---|---|
| webserver | = 14.1 |
EasyPHP Webserver 14.1 contains an OS command injection vulnerability that allows unauthenticated attackers to execute arbitrary system commands by injecting malicious payloads through the app_service_control parameter. Attackers can send POST requests to /index.php?zone=settings with crafted app_service_control values to execute commands with administrative privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free