Vulnerabilities

TI-2021-22370 CVE-2021-47753 · GHSA-q6vq-8ww2-4v69

phpKF CMS 3.00 Beta y6 - Remote Code Execution (RCE) (Unauthenticated)

HIGH 81

phpKF CMS 3.00 Beta y6 contains an unauthenticated file upload vulnerability that allows remote attackers to execute arbitrary code by bypassing file extension checks.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00781 Published 2026-01-15 No fix listed CWE-434

TI-2008-06206 CVE-2008-6516 · GHSA-jp75-4xf8-w783

Multiple directory traversal vulnerabilities in phpKF-Portal 1.10 allow remote attackers…

LOW 38

Multiple directory traversal vulnerabilities in phpKF-Portal 1.10 allow remote attackers to include arbitrary files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02578 Published 2009-03-25 No fix listed CWE-22

TI-2008-06133 CVE-2008-6443 · GHSA-j32q-jfrq-f6mr

SQL injection vulnerability in forum_duzen.php in phpKF allows remote attackers to…

LOW 35

SQL injection vulnerability in forum_duzen.php in phpKF allows remote attackers to execute arbitrary SQL commands via the fno parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00961 Published 2009-03-09 No fix listed CWE-89

Vulnerabilities

Filters

phpKF CMS 3.00 Beta y6 - Remote Code Execution (RCE) (Unauthenticated)

Multiple directory traversal vulnerabilities in phpKF-Portal 1.10 allow remote attackers…

SQL injection vulnerability in forum_duzen.php in phpKF allows remote attackers to…