We’re taking on a small number of new builds and rebuilds this quarter. Book a call to see if your project is a fit.

CVE CVE-2020-36877

CVE-2020-36877

PHP

Severity: —
CVSS: —CVSS
Published: 2025-12-05
Last modified: 2025-12-08
CWE: CWE-78

Description

ReQuest Serious Play F3 Media Server 7.0.3 contains an unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary commands as the web server user. Attackers can upload PHP executable files via the Quick File Uploader page, resulting in remote code execution on the server.

References

http://request.com/
https://www.exploit-db.com/exploits/48952
https://www.vulncheck.com/advisories/request-serious-play-f-media-server-unauthenticated-rce
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5602.php

Summary

Description

References