CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2024-39171
Critical (9.8) in phpvibe phpvibe. EPSS 1.2% chance of exploitation in the next 30 days.
Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks, which can lead to code execution via writing specific statements to .htaccess and code to a file with a .png suffix.
Severity
- EPSS
- 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-22, CWE-35
- Published
- Modified
- Record from
- the NVD, synced
Affected
- phpvibe:phpvibe