CVE-2023-36994

CriticalCVSS 9.8

Published: 07/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.74%

50th percentile - higher than 50% of all known CVEs

Summary

In TravianZ versions 8.3.4 and 8.3.3, incorrect access control in the installation script allows an attacker to overwrite the server configuration and inject PHP code.

Risk Assessment

An attacker could gain full control over the server, leading to serious security breaches and potential data loss.

Recommendation

It is recommended to update to the latest version of TravianZ and review and secure installation scripts against unauthorized access.

Original NVD description (English source)

In TravianZ 8.3.4 and 8.3.3, Incorrect Access Control in the installation script allows an attacker to overwrite the server configuration and inject PHP code.