Dulldusk

Products

ProductCVEsExploitedLatest
phpfm3–Aug 10, 2026
PHP File Manager1–Jun 6, 2024

Exploited and recent CVEs

  • CVE-2026-72593 Critical 9.8 dulldusk phpfm - Missing Authentication by Default Allows Full Filesystem Access 0.8%
  • CVE-2026-72592 Critical 9.8 dulldusk phpfm - Unauthenticated Remote Code Execution via Unrestricted PHP File Upload 0.8%
  • CVE-2023-53894 Critical 9.8 phpfm 1.7.9 Authentication Bypass via Type Juggling Vulnerability 0.6%
  • CVE-2024-5673 Medium 6.1 Cross-Site Scripting in PHP File Manager by Dulldusk 0.3%