VYPR

PhpTax

by PhpTax

CVEs (1)

  • CVE-2012-10037CriAug 11, 2025
    risk 0.69cvss epss 0.75

    PhpTax version 0.8 contains a remote code execution vulnerability in drawimage.php. The pfilez GET parameter is unsafely passed to the exec() function without sanitization. A remote attacker can inject arbitrary shell commands, leading to code execution under the web server's…