CVE-2023-53894 phpfm 1.7.9 Authentication Bypass via Type Juggling Vulnerability
Attackers can bypass authentication via type juggling to upload malicious PHP files, leading to remote code execution on the server.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-53894?
CVE-2023-53894 is a critical authentication bypass vulnerability in Dulldusk phpfm, published on 16 Dec 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
phpfm 1.7.9 contains an authentication bypass vulnerability that allows attackers to log in by exploiting loose type comparison in password hash validation. Attackers can craft specific password hashes beginning with 0e or 00e to bypass authentication and upload malicious PHP files to the server.
Weakness: CWE-1390
Which versions are affected by CVE-2023-53894?
It affects 1 product.
Products include Dulldusk Phpfilemanager.
How do I fix CVE-2023-53894?
No fix has been published for CVE-2023-53894 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2023-53894 being exploited?
There is no known exploitation of CVE-2023-53894 in the wild and no public exploit code.
Other vulnerabilities in Dulldusk phpfm
Sources
Also known as GHSA-754q-9vhg-63g7.