VYPR
← All advisories
High severity8.0NVD Advisory· Published Apr 3, 2023· Updated Jun 17, 2026

CVE-2023-28854

CVE-2023-28854

Description

nophp is a PHP web framework. Prior to version 0.0.1, nophp is vulnerable to shell command injection on httpd user. A patch was made available at commit e5409aa2d441789cbb35f6b119bef97ecc3986aa on 2023-03-30. Users should update index.php to 2023-03-30 or later or, as a workaround, add a function such as env_patchsample230330.php to env.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Nophp Project/Nophp
    cpe:2.3:a:nophp_project:nophp:*:*:*:*:*:*:*:*
    Range: <0.0.1
  • paijp/nophpllm-fuzzy2 versions
    <0.0.1+ 1 more
    • (no CPE)range: <0.0.1
    • (no CPE)range: < 0.0.1

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.