CVE-2023-36994

9.8 criticalEPSS 0.9%

Critical (9.8) in travianz project travianz. EPSS 0.9% chance of exploitation in the next 30 days.

In TravianZ 8.3.4 and 8.3.3, Incorrect Access Control in the installation script allows an attacker to overwrite the server configuration and inject PHP code.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2023-07-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

travianz_project:travianz

References

https://bramdoessecurity.com/travianz-hacked/
https://bramdoessecurity.com/travianz-hacked/

Check your stack JSON