CVE Intelligence

Dulldusk Phpfm vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Dulldusk Phpfm: 1 record(s), with affected versions and fixes.

CVE-2023-53894 Critical · 9.8 CWE-1390 Dec 16, 2025
phpfm 1.7.9 Authentication Bypass via Type Juggling Vulnerability
phpfm 1.7.9 contains an authentication bypass vulnerability that allows attackers to log in by exploiting loose type comparison in password hash validation. Attackers can craft specific password hashes beginning with 0e or 00e to bypass authentication and upload malicious PHP files to the server.