Phpfk

phpfk

Vendor: Frank Karau • 2 CVEs

CVEs (2)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2017-18364

1Frank Karau

1Phpfk

Nov 21, 2024

Mar 27, 2019

N/A· v4

6.1 MEDIUM· v3

4.3 MEDIUM· v2

phpFK lite has XSS via the faq.php, members.php, or search.php query string or the user.php user parameter.

CVE-2009-2112

1Frank Karau

1Phpfk

Apr 23, 2026

Jun 18, 2009

N/A· v4

N/A· v3

7.5 HIGH· v2

Directory traversal vulnerability in include/page_bottom.php in phpFK 7.03 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the _FORUM[settings_design_style] param...Show more