CVE-2025-34061P2CRITICALCVSS 9.3PoC≥ 2016, ≤ 20182025-07-03
CVE-2025-34061 [CRITICAL] CWE-94 CVE-2025-34061: A backdoor in PHPStudy versions 2016 through 2018 allows unauthenticated remote attackers to execute
A backdoor in PHPStudy versions 2016 through 2018 allows unauthenticated remote attackers to execute arbitrary PHP code on affected installations. The backdoor listens for base64-encoded PHP payloads in the Accept-Charset HTTP header of incoming requests, decodes and executes the payload without proper validation. This leads to remote code executio
nvd