PT-2025-51742 · Phpfm · Phpfm

Thoughtfault · Publicado 2025-12-16 · Atualizado 2026-01-21 · CVE-2023-53894

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions phpfm version 1.7.9

Description phpfm version 1.7.9 contains an authentication bypass. This occurs due to a loose type comparison during password hash validation. Attackers can bypass authentication by crafting specific password hashes starting with '0e' or '00e', allowing unauthorized access. Successful exploitation enables attackers to upload malicious PHP files to the server. The vulnerable component is the password hash validation process, specifically the comparison logic within the checkPassword() function. The vulnerable parameter is the password hash.

Recommendations Update to a newer version of phpfm that addresses this issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-1390

Identificadores relacionados

CVE-2023-53894

Produtos afetados

Phpfm

Referências · 10

• 🔥 https://exploit-db.com/exploits/51594 · Exploit
• https://twitter.com/CVEnew/status/2000986382005915717 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/2001086218491011418 · Publicação no Twitter
• https://dulldusk.com/phpfm · Nota
• https://vulncheck.com/advisories/phpfm-authentication-bypass-via-type-juggling-vulnerability · Nota
• https://twitter.com/CveFindCom/status/2000984194436968584 · Publicação no Twitter
• https://twitter.com/0dayPublishing/status/2000976888164970957 · Publicação no Twitter
• https://t.me/cveNotify/149481 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-53894 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-53894 · Aviso do Fabricante