PhreeBooks ERP 5.2.3 contains an arbitrary file upload vulnerability in the Image Manager component that allows authenticated attackers to upload malicious files by su…

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Mar 24, 2026 · NIST NVD

   Detected

   PhreeBooks ERP 5.2.3 contains an arbitrary file upload vulnerability in the Image Manager component that allows authenticated attackers to upload malicious files by submitting requests to the image upload endpoint. Attackers can upload PHP files through the imgFile parameter to the bizuno/image/manager endpoint and execute them via the bizunoFS.php script for remote code execution.

2. Jun 17, 2026 · NIST NVD

   Updated

   PhreeBooks ERP 5.2.3 contains an arbitrary file upload vulnerability in the Image Manager component that allows authenticated attackers to upload malicious files by submitting requests to the image upload endpoint. Attackers can upload PHP files through the imgFile parameter to the bizuno/image/manager endpoint and execute them via the bizunoFS.php script for remote code execution.

Affected

• cpe phreesoft/phreebookserp5.2.3

Sources

• CVE.orgVulnerability recordCVE-2019-25630

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2019-25630

  PhreeBooks ERP 5.2.3 contains an arbitrary file upload vulnerability in the Image Manager component that allows authenticated attackers to upload malicious files by submitting requests to the image upload endpoint. Attackers can upload PHP files through the imgFile parameter to t

  nvd.nist.gov

References

• Product · sourceforge.net
• Exploit · exploit-db.com
• Product · phreesoft.com
• Third Party Advisory · vulncheck.com