CVE-2014-8731: Phpmemcachedadmin Project Phpmemcachedadmin

Critical severity, CVSS 9.8. EPSS: 11.8% chance of exploitation in the next 30 days.

PHPMemcachedAdmin 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via vectors related "serialized data and the last part of the concatenated filename," which creates a file in webroot.

Affected products

• Phpmemcachedadmin Project Phpmemcachedadmin: up to and including 1.2.2

Published 2017-03-23. Last modified 2026-06-17.