Phreesoft PhreeBooks vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Phreesoft PhreeBooks: 1 record(s), with affected versions and fixes.
CVE-2021-47904
High · 8.8
CWE-434 Jan 23, 2026
PhreeBooks 5.2.3 - Remote Code Execution
PhreeBooks 5.2.3 contains an authenticated file upload vulnerability in the Image Manager that allows remote code execution. Attackers can upload a malicious PHP web shell by exploiting unrestricted file type uploads to gain command execution on the server.