CVE-2024-25415
A remote code execution (RCE) vulnerability in /admin/define_language.php of CE Phoenix v1.0.8.20 allows attackers to execute arbitrary PHP code via injecting a crafted payload …
Published: 2024-02-16 · CVSS: 7.2 · CVSS 3.1
A remote code execution (RCE) vulnerability in /admin/define_language.php of CE Phoenix v1.0.8.20 allows attackers to execute arbitrary PHP code via injecting a crafted payload into the file english.php.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7