VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jul 9, 2024· Updated Jul 9, 2026

CVE-2024-39171

CVE-2024-39171

Description

Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks, which can lead to code execution via writing specific statements to .htaccess and code to a file with a .png suffix.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Phpvibe/Phpvibecpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: <=11.0.46

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.