Phreesoft Phreebookserp — known CVE vulnerabilities

Every CVE whose affected-product data names Phreesoft Phreebookserp, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2019-25630 — CVSS 8.8 (high): PhreeBooks ERP 5.2.3 contains an arbitrary file upload vulnerability in the Image Manager component that allows authenticated attackers to…
• CVE-2019-25647 — CVSS 8.8 (high): PhreeBooks ERP 5.2.3 contains a remote code execution vulnerability in the image manager that allows authenticated attackers to upload and…
• CVE-2017-5990 — CVSS 6.1 (medium): An issue was discovered in PhreeBooksERP before 2017-02-13. The vulnerability exists due to insufficient filtration of user-supplied data…