Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
phpKF CMS 3.00 Beta y6 - Remote Code Execution (RCE) (Unauthenticated)
Vulnerability Description
phpKF CMS 3.00 Beta y6 contains an unauthenticated file upload vulnerability that allows remote attackers to execute arbitrary code by bypassing file extension checks. Attackers can upload a PHP file disguised as a PNG, rename it, and execute system commands through a crafted web shell parameter.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
phpKF CMS 安全漏洞
Vulnerability Description
phpKF CMS是土耳其phpKF公司的一款内容管理系统。 phpKF CMS 3.00 Beta y6版本存在安全漏洞，该漏洞源于未经验证的文件上传功能，可能绕过文件扩展名检查，导致远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A