Phreesoft - vulnerabilities (CVEs)

4 CVEs in 3 products, 0 in the last 30 days, newest from 2026-03-24.

Products

• Phreebookserp - 4 CVEs
• Phreebooks - 0 CVEs
• Phreebooks Erp - 0 CVEs

Newest CVEs of Phreesoft

• CVE-2019-25647 - CVSS 8.8 (high), 2026-03-24: PhreeBooks ERP 5.2.3 contains a remote code execution vulnerability in the image manager that allows authenticated attackers to upload and execute arbitrary…
• CVE-2019-25630 - CVSS 8.8 (high), 2026-03-24: PhreeBooks ERP 5.2.3 contains an arbitrary file upload vulnerability in the Image Manager component that allows authenticated attackers to upload malicious…
• CVE-2021-47904 - CVSS 8.8 (high), 2026-01-23: PhreeBooks 5.2.3 contains an authenticated file upload vulnerability in the Image Manager that allows remote code execution. Attackers can upload a malicious…
• CVE-2017-5990 - CVSS 6.1 (medium), 2017-02-15: An issue was discovered in PhreeBooksERP before 2017-02-13. The vulnerability exists due to insufficient filtration of user-supplied data in the "form" HTTP…