Dulldusk
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| phpfm | 3 | – | Aug 10, 2026 |
| PHP File Manager | 1 | – | Jun 6, 2024 |
Exploited and recent CVEs
- CVE-2026-72593 dulldusk phpfm - Missing Authentication by Default Allows Full Filesystem Access 0.8%
- CVE-2026-72592 dulldusk phpfm - Unauthenticated Remote Code Execution via Unrestricted PHP File Upload 0.8%
- CVE-2023-53894 phpfm 1.7.9 Authentication Bypass via Type Juggling Vulnerability 0.6%
- CVE-2024-5673 Cross-Site Scripting in PHP File Manager by Dulldusk 0.3%