📦

cms

Vendor: phpkf

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 1 Remote Access
Total CVEs 2 Total Indexed
Avg. EPSS 0.67% Exploit Prob.
Latest CVE CVE-2021-47753 Jan 15

Security Vulnerability Index

Page 1 / 1
9.3 CVSS
CVE-2021-47753
RCE

phpKF CMS 3.00 Beta y6 contains an unauthenticated file upload vulnerability that allows remote attackers to execute arbitrary code by bypassing file extension checks. Attackers can upload a PHP file disguised as a PNG, rename it, and execute system commands through a crafted web shell parameter.

EPSS: 0.67%