cbcvebase.

Dulldusk Phpfm vulnerabilities

1 known vulnerability affecting dulldusk/phpfm.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2023-53894P2CRITICALCVSS 9.8v1.7.92025-12-16
CVE-2023-53894 [CRITICAL] CWE-1390 CVE-2023-53894: phpfm 1.7.9 contains an authentication bypass vulnerability that allows attackers to log in by explo phpfm 1.7.9 contains an authentication bypass vulnerability that allows attackers to log in by exploiting loose type comparison in password hash validation. Attackers can craft specific password hashes beginning with 0e or 00e to bypass authentication and upload malicious PHP files to the server.
nvd
Dulldusk Phpfm vulnerabilities | cvebase