The vulnerability of the PHP web application development platform PHPPHPStudy lies in the improper encoding of the HTTP header Accept-Charset, allowing attackers to execute arbitrary code.

The vulnerability of the PHP web application development platform PHPPHPStudy is related to incorrect encoding of the HTTP header Accept-Charset using Base64 encoding. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2025-34061: Improper Control of Generation of Code

A backdoor in PHPStudy versions 2016 through 2018 allows unauthenticated remote attackers to execute arbitrary PHP code on affected installations. The backdoor listens for base64-encoded PHP payloads in the Accept-Charset HTTP header of incoming requests, decodes and executes the payload without...

Null pointer dereference

The RemotelyAnywhere.exe service in the Remotely Anywhere Server and Workstation 8.0.668 and earlier allows remote attackers to cause a denial of service crash via an invalid Accept-Charset header, which triggers a NULL pointer dereference. NOTE: the service is automatically restarted...