Read the docs

Dulldusk

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Dulldusk records in CISA KEV

No Dulldusk vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Phpfilemanager 3 records MEDIUM

Records

3 records in Phpfilemanager · all components

TI-2019-15685 CVE-2019-25632 · GHSA-w9gq-m6jq-ff6m

phpFileManager 1.7.8 Local File Inclusion via index.php

Priority MEDIUM 64

phpFileManager 1.7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the action, fm_current_dir, and filename parameters.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.00566 Published 2026-03-24 No fix listed CWE-306
TI-2023-30177 CVE-2023-53894 · GHSA-754q-9vhg-63g7

phpfm 1.7.9 Authentication Bypass via Type Juggling Vulnerability

Priority MEDIUM 49

phpfm 1.7.9 contains an authentication bypass vulnerability that allows attackers to log in by exploiting loose type comparison in password hash validation.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00622 Published 2025-12-16 No fix listed CWE-1390
Open these records in search →