CVE-2023-53894

Katalog CVE

CVSS 9.8 · Critical EPSS 0,62%

Kerentanan Weak Authentication pada dulldusk phpfilemanager. Skor CVSS 3.1 9.8 (Critical) menurut vulncheck.com.

Deskripsi (NVD)

phpfm 1.7.9 contains an authentication bypass vulnerability that allows attackers to log in by exploiting loose type comparison in password hash validation. Attackers can craft specific password hashes beginning with 0e or 00e to bypass authentication and upload malicious PHP files to the server.

Rincian

Terbit di NVD

16 Desember 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber vulncheck.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1390: Weak Authentication

EPSS (30 hari)

0,62% peluang dieksploitasi; lebih tinggi dari 48,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.exploit-db.com/exploits/51594 exploit · advisory pihak ketiga
• https://www.vulncheck.com/advisories/phpfm-authentication-bypass-via-type-juggling-vulnerability advisory pihak ketiga
• https://www.dulldusk.com/phpfm/ product