Skip to content
Sign in
5.3 Medium

CVE-2026-6573 A vulnerability was detected in PHPEMS 11.0

Description

A vulnerability was detected in PHPEMS 11.0. This affects the function temppage of the file /app/exam/controller/exams.master.php of the component Instant Exam Creation Handler. The manipulation of the argument uploadfile results in server-side request forgery. The attack can be executed remotely. The exploit is now public and may be used.

Affected products and versions

Product Affected versions Fixed in
PHPEMS 11.0 No fix stated

Other CVEs of PHPEMS

The 8 CVEs of PHPEMS →
CVE-2026-3946 A vulnerability was detected in PHPEMS 11.0 5.1 Medium CVE-2025-15405 A vulnerability was detected in PHPEMS up to 11.0 5.3 Medium CVE-2025-15244 A vulnerability has been found in PHPEMS up to 11.0 6.3 Medium CVE-2025-15242 A vulnerability was detected in PHPEMS up to 11.0 2.3 Low
Track this CVE