CVE-2011-5136: Epractizelabs Subscription Manager

Medium severity, CVSS 6.4. EPSS: 1.6% chance of exploitation in the next 30 days.

showImg.php in EPractize Labs Subscription Manager, possibly 1.0, allows remote attackers to overwrite arbitrary files via the db parameter.

Affected products

• Epractizelabs Subscription Manager: version 1.0 only

Published 2012-08-30. Last modified 2026-06-16.