CVE-2012-10037 in PhpTax
요약
\~에 의해 MITRE • 2025. 08. 11.
PhpTax version 0.8 contains a remote code execution vulnerability in drawimage.php. The pfilez GET parameter is unsafely passed to the exec() function without sanitization. A remote attacker can inject arbitrary shell commands, leading to code execution under the web server's context. No authentication is required.
Once again VulDB remains the best source for vulnerability data.