CVE-2026-112301

A security flaw exists in orbitale imagemagick-php up to version 3.3.5 . The vulnerability is located in the Command::font function within the src/Command.php file. Improper handling of the fontFile argument allows for remote OS command injection . Public exploits for this vulnerability are avail...

CVE-2026-112301 orbitale imagemagick-php Command.php font os command injection

A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. Affected by this issue is the function Command::font of the file src/Command.php. The manipulation of the argument fontFile results in os command injection. The attack can be executed remotely. The exploit has been...

OS Command Injection

mikehaertl/php-shellcommand is vulnerable to OS command injection. The addArg function in src/Command.php does not escape all arguments, allowing an attacker to inject arbitrary OS commands...