CVE-2023-36992 - PHP injection in TravianZ 8.3.4 and 8.3.3 in the config editor in the admin page allows remote attackers to execute PHP code

HIGH

PHP injection in TravianZ 8.3.4 and 8.3.3 in the config editor in the admin page allows remote attackers to execute PHP code

Published Jul 7, 2023

7.2

HIGH

CVSS 3.1

EPSS 1.31%

PHP injection in TravianZ 8.3.4 and 8.3.3 in the config editor in the admin page allows remote attackers to execute PHP code.

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

Link	Providers	Tags
https://bramdoessecurity.com/travianz-hacked/		ExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-40912		Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jul 7, 2023

Updated Nov 13, 2024

Reserved Jun 28, 2023

Updated Nov 13, 2024

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Jul 7, 2023

Updated Nov 13, 2024

Exploited since n/a