VYPR

Phpkf

by Phpkf

CVEs (2)

  • CVE-2021-47753CriJan 15, 2026
    risk 0.64cvss 9.8epss 0.01

    phpKF CMS 3.00 Beta y6 contains an unauthenticated file upload vulnerability that allows remote attackers to execute arbitrary code by bypassing file extension checks. Attackers can upload a PHP file disguised as a PNG, rename it, and execute system commands through a crafted…

  • CVE-2008-6443Mar 9, 2009
    risk 0.03cvss epss 0.01

    SQL injection vulnerability in forum_duzen.php in phpKF allows remote attackers to execute arbitrary SQL commands via the fno parameter.