CVE-2023-36992

Summary

CVE-2023-36992 is a PHP injection vulnerability affecting TravianZ versions 8.3.4 and 8.3.3. Malicious actors can exploit this flaw in the config editor of the admin page to execute arbitrary PHP code remotely. Successful exploitation could lead to server compromise, data theft, or unauthorized modifications. It's crucial for users to upgrade their TravianZ installations to the latest, non-vulnerable version to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.