phpkit vulnerabilities and fixes
Recent CVEs affecting phpkit, with upgrade or downgrade steps. 1 tracked.
phpkit has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-05-24. Highest priority: CVE-2016-10758 (score 55/100).
- CVE-2016-10758 HIGH 8.8 DOWNGRADE PHPKIT 1.6.6 allows arbitrary File Upload, as demonstrated by a .php file to pkinc/admin/mediaarchive.php and
FAQ
How do I fix phpkit vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is phpkit being exploited right now?
None of the tracked phpkit CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which phpkit CVE should I patch first?
CVE-2016-10758 currently ranks highest (55/100): PHPKIT 1.6.6 allows arbitrary File Upload, as demonstrated by a .php file to pkinc/admin/mediaarchive.php and .